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Abstract 



This thesis is divided into two parts. In Part U we introduce a new formalism 
for quantum strategies, which specify the actions of one party in any multi-party 
interaction involving the exchange of multiple quantum messages among the parties. 
This formalism associates with each strategy a single positive semidefinite operator 
acting only upon the tensor product of the input and output message spaces for the 
strategy. We establish three fundamental properties of this new representation for 
quantum strategies and we list several applications, including a quantum version 
of von Neumann's celebrated 1928 Min-Max Theorem for zero-sum games and an 
efficient algorithm for computing the value of such a game. 

In Part [III we establish several properties of a class of quantum operations that 
can be implemented locally with shared quantum entanglement or classical ran- 
domness. In particular, we establish the existence of a ball of local operations with 
shared randomness lying within the space spanned by the no-signaling operations 
and centred at the completely noisy channel. The existence of this ball is employed 
to prove that the weak membership problem for local operations with shared entan- 
glement is strongly NP-hard. We also provide characterizations of local operations 
in terms of linear functionals that are positive and "completely" positive on a cer- 
tain cone of Hermitian operators, under a natural notion of complete positivity 
appropriate to that cone. We end the thesis with a discussion of the properties of 
no-signaling quantum operations. 
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Chapter 1 
Introduction 



This thesis investigates two distinct topics of interest within the discipline of quan- 
tum information theory: quantum strategies and local operations with shared en- 
tanglement. The discussion on quantum strategies is contained in Part[U while the 
discussion on local operations with shared entanglement is given in Part [III 

This introductory chapter provides a broad overview of the results of the thesis 
in Section [LTl A review of relevant background material from linear algebra, convex 
analysis, and quantum information is provided in Section 11.21 

1.1 Overview 

In this section we provide a summary of the main contributions of the present 
thesis. Mathematics and quantum formalism are invoked only informally so as to 
facilitate a broad description of results without getting bogged down in detail. 

Except where otherwise noted, the content of this thesis is drawn from existing 
literature as follows: 

• Part [J excluding Chapter [5], first appeared in preliminary form in Rcf. [GW07J. 

• Chapter \5\ is otherwise unpublished and due solely to the present author. 

• Part Hi] first appeared in Ref . |Gut09] . 

1.1.1 Quantum strategies 

In Part |T] of this thesis we propose a new mathematical formalism for quantum 
strategies, prove several fundamental properties of this formalism, and provide sev- 
eral applications. 
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Informally, a quantum strategy is a complete specification of the actions of one 
party in any multi-party interaction involving the exchange of one or more quan- 
tum messages among the parties. Due to the generality of this notion, the potential 
for application of this formalism is very broad. Indeed, our formalism should in 
principle apply to any framework that incorporates the exchange of quantum in- 
formation among multiple entities, such as quantum cryptography, computational 
complexity, communication complexity, and distributed computation. 

In this introductory section concerning quantum strategies, it is convenient to 
avoid cluttering discussion with historical background and citations. Instead, the 
necessary background and references for each topic are covered in detail as they 
appear in the main body of the thesis. 

Three properties of the new formalism 

Chapter [2] is devoted to formal definitions of quantum strategies and a discussion 
thereof. Under our new formalism, such a strategy is represented by a positive 
semidefinite operator S, the dimensions of which depend only upon the size of 
the messages exchanged in the interaction and not upon the size of any memory 
workspace maintained by the strategy between messages. (This distinction is im- 
portant, as it permits us to consider strategies that call for an arbitrarily large 
memory workspace.) We prove in Chapter [3] that the set of all positive semidefinite 
operators which are valid representations of quantum strategies is characterized by 
a simple and efficiently- verifiable collection of linear equality conditions. 

In order to extract useful classical information from such an interaction, a strat- 
egy will often call for one or more quantum measurements throughout the inter- 
action. In this case, the strategy is instead represented by a set {S a } of posi- 
tive semidefinite operators indexed by all the possible combinations of outcomes 
of the measurements. These strategies are called measuring strategies and satisfy 

S a = S for some ordinary (non-measuring) strategy S. (By comparison, an 
ordinary POVM-type quantum measurement {P a } satisfies ^2 a P a = !■) 

We also prove in Chapter |3] that the relationship between measuring strategies 
and other strategies is analogous to that between ordinary quantum measurements 
and quantum states. In particular, basic quantum formalism tells us that for any 
ordinary quantum measurement {P a } with outcomes indexed by a and any quantum 
state p it holds that the probability with which the measurement {P a } yields a 
particular outcome a when applied to a quantum system in state p is given by the 
inner product 

Pr[{P a } yields outcome a on p] = (P a , p) = Tr(P a p). 

Similarly, we show that the probability with which a measuring strategy {S a } yields 
outcome a after an interaction with a compatible quantum strategy T is given by 

PrfjS'a} yields outcome a when interacting with T] = (S a ,T) = Tr (S a T). 
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Finally, we establish a convenient formula for computing the maximum proba- 
bility with which a given measuring strategy {S a } can be forced to produce a given 
outcome a. This probability is given by the minimum real number A for which 
there exists an ordinary (non-measuring) strategy Q with the property that the 
operator XQ — S a is still positive semidefinite. 

Applications 

These three properties of quantum strategies — their linear characterization, inner 
product relationship, and formula for maximum output probability — open the door 
to a variety of new applications, several of which are presented in Chapter HI 

First and foremost, these properties pave the way for the first fully general 
theory of two-player zero-sum quantum games. In particular, we prove a quantum 
analogue of von Neumann's famous 1928 Min-Max Theorem for zero-sum games. 
We also show that the value of such a game can be expressed as the value of a 
semidefinite optimization problem and can therefore be efficiently approximated to 
arbitrary precision by standard algorithms for semidefinite optimization. 

We then apply this newfound algorithm to computational complexity theory, 
establishing that the fundamental class EXP of decision problems that admit de- 
terministic exponential-time classical solutions coincides with the exotic class QRG 
of decision problems that admit a quantum interactive proof with two competing 
provers. That is, 

QRG = EXP. 

This equivalence is a rare characterization of a fundamental classical complexity 
class by a purely quantum complexity class. As problems in EXP also admit classi- 
cal interactive proofs with competing provers, we obtain as a corollary the fact that 
quantum interactive proofs with competing provers provably contain no additional 
expressive power beyond that of classical interactive proofs with competing provers. 
By contrast, it is widely believed, but not proven, that polynomial-time quantum 
computers are strictly more powerful than polynomial-time classical computers. 

Elsewhere within the domain of complexity theory, we employ our new formal- 
ism to prove that many-message quantum interactive proofs with one prover or 
with two competing provers may be repeated multiple times in parallel so as to de- 
crease the probability of error without increasing the number of messages exchanged 
among the parties in the interaction. 

Finally, the aforementioned properties of quantum strategies are applied to yield 
an alternate and simplified proof of Kitaev's bound for strong quantum coin-flipping 
protocols. Coin-flipping is a fundamental primitive arising in the study of cryptog- 
raphy in the context of secure two-party computation. A coin-flipping protocol 
is an interaction between to mutually untrusting parties who wish to agree on a 
random bit (a coin flip) via remote communication. A strong coin-flipping protocol 
with bias e has the property that two honest parties always produce a perfectly 
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random coin toss, yet a dishonest party who attempts to force a given outcome 
upon an honest party can succeed with probability no more than 1/2 + e. Kitaev 
showed that any strong coin-flipping protocol in which the parties exchange and 
process quantum information must have bias at least I/a/2 — 1/2 ~ 0.207. Ki- 
taev's original proof of this fact relied upon the powerful machinery of semidefmite 
optimization duality. In our proof, the complication of semidefmite optimization 
duality is successfully encapsulated in the properties of quantum strategies; what 
remains is a simple calculation that fits easily into half of a page. 

It is noteworthy that a fourth application of the formalism of quantum strategies — 
beyond quantum game theory, complexity theory, and coin-flipping — appears in 
Chapter |H] of Part [IT] of this thesis. In particular, the inner product relationship for 
quantum measuring strategies is employed to establish the NP-hardness of weak 
membership testing for local operations with shared entanglement. 

In addition to our results, other authors have used the formalism of quantum 
strategies in other areas, as we now describe. 

Independent development of the new formalism 

Our formalism and some of its properties were independently re-discovered by Chiri- 
bella, D'Ariano, and Perinotti [CDP08e| ICDP09a| . What we call a "quantum 
strategy," they call a "quantum comb." In their initial publication on the subject, 
these authors prove an analogue of our Theorem 13.21 (Characterization of strate- 
gies). Moreover, our Theorem 13.11 (Interaction output probabilities) is established 
in Refs. [CDPOSal [CDPOSdj . 

These and other authors have provided several additional applications of quan- 
tum strategies to such problems as optimization of quantum circuits architecture 
|CDP08e] . cloning and learning of unitary operations [CDP08bl |BCD + Q9a] , and 
an impossibility proof for quantum bit commitment [CDP + 09~b] . among others 
|CDP08cllBCD+09b] . 

Distance measures 

After establishing useful properties of quantum strategies in Chapter [3] and then 
applying those properties in Chapter HI we return in Chapter [5] to basic formalism 
for quantum strategies. We define a new norm that captures the distinguishability 
of quantum strategies in the same sense that the trace norm for operators captures 
the distinguishability of quantum states or the diamond norm for super-operators 
captures the distinguishability of quantum operations. Whereas the trace norm 
\\p — cllir f° r quantum states p, a is given by 

\\p ~ clWr = max {(P — Pi, p — o) : {P , Pi} is a quantum measurement} , 

we define the strategy r-norm \\Q — -R||<> r for quantum strategies Q, R by 

||Q — -R||or = max{(5'o — Si, Q — R) : {So, Si} is a measuring strategy} . 
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Here the subscript r denotes the number of rounds of messages in the protocol for 
which Q, R are strategies. In particular, each positive integer r induces a different 
strategy norm. Our choice of notation is inspired by the fact that this norm is 
shown to coincide with the diamond norm for the case r — 1. 

Our primary application of the strategy norm is a generalization of a result of 
Ref. [GW05] . which states that for any two convex sets A , Ai of quantum states 
there exists a fixed quantum measurement that distinguishes any two states chosen 
from these sets with probability that varies according to the minimal trace norm 
distance between the sets A and A x . In other words, this measurement can be used 
to distinguish any choices of states from A , Ai at least as well as any measurement 
could distinguish the two closest states from those sets. 

Accordingly, our new result states that for any two convex sets So, Si of r- round 
quantum strategies, there exists a fixed measuring strategy that distinguishes any 
choices of strategies from those sets with probability according to the minimal 
distance between the sets So and Si as measured by the new strategy r-norm. 

We conclude Chapter [5] with a discussion of the dual of the diamond norm for 
super-operators and its relation to the strategy norms. The dual of the diamond 
norm of a super-operator $ is defined by 

II $11* = max I I 
||*||o=i lv 

for some appropriate notion of inner product between super-operators. 

While the diamond norm plays a fundamental role in the theory of quantum 
information, its dual has never been studied. Hence, we establish several basic facts 
about this norm. For example, the maximum in the definition of is achieved 
by a Hermitian-preserving super-operator whenever $ is Hermitian-preserving, and 
by a completely positive super-operator whenever $ is completely positive. These 
facts are employed to show that a variant of the strategy 1-norm coincides with 
the dual of the diamond norm. Thus, the strategy r-norms are shown to generalize 
both the diamond norm and its dual. 

1.1.2 Local operations with shared entanglement 

In Part HT1 we prove several properties of local operations with shared entanglement 
or randomness. Informally, a local operation is a quantum operation that can be 
implemented by distinct parties, each acting only upon his or her own portion of 
an overall quantum system. 

In a local operation with shared randomness (LOSR), the parties are permitted 
to share random bits — say, common knowledge of an integer sampled at random ac- 
cording to some fixed probability distribution. The parties may use their knowledge 
of this shared randomness to correlate their distinct operations. 

In a local operation with shared entanglement (LOSE), rather than randomness, 
the parties are permitted to share among them distinct portions of some quantum 
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system, the overall state of which may be entangled across the different parties. The 
existence of such a shared state permits the parties to achieve correlations among 
their local operations that could not otherwise be achieved with randomness alone. 

By contrast with Section it is expedient to include a discussion of historical 
background and citations in this introductory section concerning local operations 
with shared entanglement. 



Background 

LOSE operations are of particular interest in the quantum information community 
in part because any physical operation jointly implemented by spatially separated 
parties who obey both quantum mechanics and relativistic causality must necessar- 
ily be of this form. Moreover, it is notoriously difficult to say anything meaningful 
about this class of operations, despite its simple definition. 

One source of such difficulty stems from the fact that there exist two-party LOSE 
operations with the fascinating property that they cannot be implemented with any 
finite amount of shared entanglement [LTW08J. This difficulty has manifested itself 
quite prominently in the study of two-player co-operative games: classical games 
characterize NPj^J whereas quantum games with shared entanglement are not even 
known to be computable. Within the context of these games, interest has focused 
largely on special cases of LOSE operations |KM03l ICHTW041 IWeh06l [CSUU081 



ICGJ09j IKRT08] , but progress has been made recently in the general case |KKM + 08 



IKKMV081 ILTW081 IDLTW081 INPA081 I1KM09] . In the physics literature, LOSE 
operations are often discussed in the context of no-signaling operations [B GNPOlt 
IESW02llPlTrTH06] . 

In the present thesis some light is shed on the general class of multi-party LOSE 
operations, as well as the sub-class of LOSR operations. Several distinct results 
are established, many of which mirror some existing result pertaining to separable 
quantum states. What follows is a brief description of each result together with its 
analogue from the literature on separable states where appropriate. 



Ball around the identity 

Prior work on separable quantum states. If A is a Hermitian operator acting on 
a d- dimensional bipartite space and whose Frobenius norm at most 1 then 
the perturbation / ± A of the identity represents an (unnormalized) bipartite 
separable quantum state. In other words, there is a ball of (normalized) 
bipartite separable states with radius \ in Frobenius norm centred at the 
completely mixed state \l [Gur02l IGB02] . 

1 As noted in Ref. jKKM+08) . this characterization follows from the PCP Theorem jALM+98| 
IAS98] . 
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A similar ball exists in the multipartite case, but with smaller radius. In 
particular, there is a ball of m-partite separable <i-dimensional states with 
radius Q (2~ m / 2 <i _1 ) in Frobenius norm centred at the completely mixed state 
|GB03j . Subsequent results offer some improvements on this radius |Sza05| 
[GB051 [HII05] . 

Present work on local quantum operations. An analogous result is proven in Chap- 
ter [7J for multi-party LOSE and LOSR operations. Specifically, if A is a 
Hermitian operator acting on an n- dimensional m-partite space and whose 
Frobenius norm scales as O (2~ m n~ 3 ^ 2 ) then / ± A is the Choi-Jamiolkowski 
representation of an (unnormalized) m-party LOSR operation. As the unnor- 
malized completely noisy channel 

A:l4 Tr(X)I 

is the unique quantum operation whose Choi-Jamiolkowski representation 
equals the identity, it follows that there is a ball of m-party LOSR opera- 
tions (and hence also of LOSE operations) with radius f2 {2~' m n~ z l 2 d~ 1 } in 
Frobenius norm centred at the completely noisy channel ^A. (Here the nor- 
malization factor d is the dimension of the output system.) 

The perturbation A must lie in the space spanned by Choi-Jamiolkowski 
representations of the no-signaling operations. Conceptual implications of 
this technicality are discussed in the concluding remarks of Chapter [7J No- 
signaling operations are discussed in Chapter [10] of the present thesis, as 
summarized below. 

Comparison of proof techniques. Existence of this ball of LOSR operations is 
established via elementary linear algebra. By contrast, existence of the ball 
of separable states was originally established via a delicate combination of 

(i) the fundamental characterizations of separable states in terms of positive 
super-operators (described in more detail below), together with 

(ii) nontrivial norm inequalities for these super-operators. 

Moreover, the techniques presented herein for LOSR operations are of suffi- 
cient generality to immediately imply a ball of separable states without the 
need for the aforementioned characterizations or their accompanying norm 
inequalities. This simplification comes in spite of the inherently more com- 
plicated nature of LOSR operations as compared to separable states. It 
should be noted, however, that the ball of separable states implied by the 
present work is smaller than the ball established in prior work by a factor of 

2-m/2^-3/2 

Weak membership problems are NP-hard 

Prior work on separable quantum states. The weak membership problem for sep- 
arable quantum states asks, 
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"Given a description of a quantum state p and an accuracy param- 
eter e, is p within distance e of a separable state?" 

This problem was proven strongly NP-complete under oracle (Cook) reduc- 
tions by Gharibian [Gha08], who built upon the work of Gurvits [Gur02j and 
Liu |Liu07] . In this context, "strongly NP-complete" means that the problem 
remains NP-complete even when the accuracy parameter e — 1/s is given in 
unary as I s . 

NP-completeness of the weak membership problem was originally established 
by Gurvits |Gur02j . The proof consists of an NP-completeness result for 
the weak validity problem — a decision version of linear optimization over 
separable states — followed by an application of the Yudin-Nemirovskii Theo- 
rem |YN76l lGLS88j. which provides an oracle-polynomial-time reduction from 
weak validity to weak membership for general convex sets. 

As a precondition of the Yudin-Nemirovskh Theorem, the convex set in ques- 
tion (in our case, the set of separable quantum states) must contain a suffi- 
ciently large ball. In particular, this NP-completeness result relies crucially 
upon the existence of the aforementioned ball of separable quantum states. 

For strong NP-completeness, it is necessary to employ a specialized "approxi- 
mate" version of the Yudin-Nemirovskh Theorem due to Liu |Liu07[ Theorem 
2.3]. 

Present work on local quantum operations. In Chapter [S] it is proved that the weak 
membership problems for LOSE and LOSR operations are both strongly NP- 
hard under oracle reductions. The result for LOSR operations follows trivially 
from Gharibian (just take the input spaces to be empty). But it is unclear how 
to obtain the result for LOSE operations without invoking the contributions 
of the present thesis. 

The proof begins by observing that the weak validity problem for LOSE 
operations is merely a two-player quantum game in disguise and hence is 
strongly NP-hard |KKM + 08j . The hardness result for the weak membership 
problem is then obtained via a Gurvits-Gharibian-style application of Liu's 
version of the Yudin-Nemirovskii Theorem, which of course depends upon the 
existence of the ball revealed in Section 17.21 

Characterization in terms of positive super-operators 

Prior work on separable quantum states. A quantum state p of a bipartite system 
X\ <g> X 2 is separable if and only if the operator 

($® JU)0) 

is positive semidefmite whenever the super-operator $ is positive. This fun- 
damental fact was first proven in 1996 by Horodecki et al. [HHH96J. 
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The multipartite case reduces inductively to the bipartite case: the state 
p of an m-partite system is separable if and only if ($ ® 1) (p) is positive 
semidefmite whenever the super-operator $ is positive on (m — l)-partite 
separable operators [HHH01J. 

Present work on local quantum operations. In Chapter [9] it is proved that a multi- 
party quantum operation A is a LOSE operation if and only if 

<p(J(A)) > 

whenever the linear functional (p is "completely" positive on a certain cone 
of separable Hermitian operators, under a natural notion of complete posi- 
tivity appropriate to that cone. A characterization of LOSR operations is 
obtained by replacing complete positivity of <p with mere positivity on that 
same cone. Here J(A) denotes the Choi-Jamiolkowski representation of the 
super-operator A. 

The characterizations presented in Chapter [9]do not rely upon any of the prior 
discussion in this thesis. This independence contrasts favorably with prior 
work on separable quantum states, wherein the existence of the ball around 
the completely mixed state (and the subsequent NP-hardness result) relied 
crucially upon the characterization of separable states in terms of positive 
super-operators. 

No-signaling operations 

A quantum operation is no-signaling if it cannot be used by spatially separated 
parties to violate relativistic causality. By definition, every LOSE operation is a 
no-signaling operation. Moreover, there exist no-signaling operations that are not 
LOSE operations. Indeed, it is noted in Chapter [10] that the standard nonlocal box 
of Popescu and Rohrlich [PR94] is an example of a no-signaling operation that is 
separable (in the sense of Rains |Rai97j ). yet it is not a LOSE operation. 

Two characterizations of no-signaling operations are also discussed in Chap- 
ter [TTJJ These characterizations were first established somewhat implicitly for the 
bipartite case in Beckman et al. [B GNP01] . The present thesis generalizes these 
characterizations to the multi-party setting and recasts them more explicitly in 
terms of the Choi-Jamiolkowski representation for quantum super-operators. 

1.2 Mathematical preliminaries 

In this section we summarize the background mathematical knowledge upon which 
the work in this thesis rests. While extensive, by no means is this summary intended 
to be comprehensive. Instead, the purpose of this section is only to review existing 
concepts so that we may fix terminology and notation throughout the thesis. 
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1.2.1 Linear algebra 



Vectors, operators, and inner products 

The vector space C n of all n-tuples of complex numbers is called a complex Euclidean 
space. Complex Euclidean spaces are denoted by capital script letters such as X, 
y, and Z so as to better facilitate discussions involving multiple distinct spaces. 

Vectors in a complex Euclidean space are denoted by lowercase Roman letters 
such as u, v, and w. The standard orthonormal basis of each n-dimensional complex 
Euclidean space is typically written {e±, . . . , e„} where denotes the n-tuple whose 
ith component equals 1 with all other components equal to 0. The standard inner 
product between two vectors u,v G X is denoted (u,v). In this thesis, this inner 
product is conjugate linear in the first argument and linear in the second argument. 
In particular, if 

u = (ai, ...,a n ) 
v = (0 u ...,0 n ) 

then 

n 

(u,v) = J^o^A- 

i=l 

The standard Euclidean norm of a vector u is denoted ||w|| and is given by 

||w|| = a/ (u, u). 

Each vector u G X induces a dual vector u* , which is a linear function u* : X — >■ C 
defined by 

u* : x h-> (u, x). 
We sometimes use the alternate notation 

u*v = (u, v). 

The vector y £ y obtained by applying a linear operator A : X — > y to 
a vector x G X is denoted by the simple juxtaposition y = Ax. Similarly, the 
operator C : X — > Z obtained by composing the linear operators A: X — >■ y and 
B : y — > Z is denoted by the juxtaposition C = BA. 

Each pair of vectors x G X,y G V induces an operator yx* : X ^ y defined by 

(yx*)u = y(x*u) = {x,u)y 

for all m G X. By analogy with the inner product, the operator yx* is sometimes 
called the outer product of x and y, but we will not use that terminology in this 
thesis. 
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The adjoint of a linear operator A : X — > y is the unique operator A* : y — >■ 
satisfying 

for every x G A", y G 3^- The standard inner product for operators is given by 

(A, B) = Ti(A*B). 

Matrix representation of vectors and operators 

It is sometimes convenient to think of a linear operator A : X ^ y &s &n m x n 
matrix and of an element xGA'asanxl column vector, so that the m x 1 
column vector y G y obtained by applying A to x is given by standard matrix 
multiplication: 



*1 ' 


= y = Ax = 


a M . 






7i 


0~rn 






0"m,n 
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In this view, the asterisk superscript indicates the conjugate-transpose matrix op- 
eration. In particular, the conjugate operator A : X — > y and transpose operator 
A T : y ^ X are the linear operators whose matrix representations are given by 



A = 



Oil 



0>l,n 



A T = 



ai,i 



Si 



C^m,l • • • 0"m,n 

and the matrix representation of the adjoint operator A* is given by 

A* = (A) T = pry. 

The asterisk notation for matrices is consistent with the definition of the dual vector. 
Indeed, matrix multiplication can be used to compute the vector inner product: 



u v 



Pi 



i=l 



Matrix multiplication is also employed to compute the matrix representation of the 
operator yx* : X — > y-. 



yx 



Si 



[ll ■■■ In] = 



£i7i 

^mTl 



Similarly, matrix multiplication can be used to compute the matrix inner product— 
the composition A* B of linear operators is computed by matrix multiplication of 
A* and B, and the familiar trace function Tt(A*B) equals the sum of the diagonal 
entries of the resulting matrix A*B. 
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Tensor products 

The tensor product is a mathematical concept that is so fundamental to quantum 
information that discussion always implicitly assumes a working knowledge. The 
concept is important because it is the mechanism by which two separate quantum 
systems are viewed as a single system. 

For any two complex Euclidean spaces X, y and any two vectors x G X,y G y, 
the tensor product associates a third vector x <8> y, which is an element of a third 
vector space X <g> y of dimension dim(A') dim(3/). Specifically, letting 

{e , • • • , edim(#)-i} C X , 

{fo, /dim(y)-l} C 3^, 

{#0, • • • , ^dim(Ar®y)-l} C^®^ 

denote the standard bases of X, y, and ® y, respectively, the vector x <g) y is 
specified in terms of standard basis elements as follows: 

6j <8> /j = 9idim(y)+j- 

The complex Euclidean space X & y is called the tensor product of the spaces A" 
and y. (Indeed, any complex Euclidean space Z whose dimension is not a prime 
number may be viewed as a tensor product Z = X <g> y of two nontrivial spaces X 
and y.) 

From this definition, it is possible to derive many of the widely known basic 
properties of the tensor product. For example, the bilinear mapping defined by 

(x,y) h-» x <S> y 

is universal, meaning that any bilinear transformation ip : X x y — y V for some 
complex Euclidean space V can alternately be written as a linear operator : 
X <g) y ->■ V satisfying 

= A^(l®!/). 

As the set of all linear operators from one complex Euclidean space to another 
is itself a complex vector space, the tensor product may be extended in the obvious 
way to linear operators. From there it is possible to derive all the widely known 
properties of the tensor product for operators. We shall not list these properties 
here. 

The tensor product of two or more vectors, spaces, or operators is defined in- 
ductively, as suggested by the expression 

x®y®z = x® (y®z). 

As the tensor product operation is associative, there is no ambiguity in writing 
simply X ®y ® Z. 
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Under the matrix representation, properties of the tensor product may be de- 
rived from the following straightforward definition. For 2x2 matrices 

V q 

r s 

we have 

ap aq bp bq 
ar as br bs 
cp cq dp dq 
cr cs dr ds 

This definition extends in the obvious way to arbitrary matrices of any dimension, 
including column vectors and non-square matrices. In this context, the tensor 
product might also be called the Kronecker product. 

Often in this thesis our discussion involves tensor products of finite sequences 
of vectors, spaces, operators, and so on. As such, it is convenient to adopt the 
following shorthand for such a product: if Xi, . . . , X m are arbitrary operators then 
we define 

X^.j = Xi <g> • • • <g> Xj 

for integers 1 < % < j < m. A similar notation shall be used for vectors and 
complex Euclidean spaces. 

Sets of operators 

A linear operator A : X — > y is called an isometry if it holds that || Ax\\ = \\x\\ for 
all x G X. This condition can only be met when dim(^) > dim(A'). When X and 
y have equal dimension, an isometry is also called a unitary operator. 

The (complex) vector space of linear operators of the form A : X — > X is 
denoted L(X). The identity operator in ~L{X) is denoted Ix and the subscript is 
dropped whenever the space X is clear from the context. 

An element A of L(A') is Hermitian (or self-adjoint) if A* = A. The set of all 
Hermitian operators within L(X) forms a (real) vector space, which we denote by 
H(X). 

An operator A e L(X) is positive semidefinite if u*Au is a nonnegative real 
number for each vector u G X . Every positive semidefinite operator is also Her- 
mitian, and the set of all positive semidefinite operators within H(A') is denoted 
H + (X). In general, the use of bold font is reserved for sets of operators. For an 
arbitrary set S C H(A') of Hermitian operators, we let 

s+ = snH+W 

denote the set of positive semidefinite elements in S. 



a b 
c d 



A®P = 



aP bP 
cP dP 



a 


p 


1 


b 


p 


1 








r 


s 




r 


s 






c 


p 


Q 


d 


p 


Q 








r 


s 




r 


s 
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We adopt the notation P y to indicate that the operator P is positive semidef- 
inite. As suggested by this notation, the semidefinite partial ordering on Hermitian 
operators is defined so that P >z Q if and only if P — Q is positive semidefinite. 
For each positive semidefinite operator P there exists a unique positive semidefinite 
operator \fP called the square root of P with the property that {\fP) 2 = P. 

Super-operators 

A super- operator is a linear operator of the form <3> : L(A') — > L(^). The identity 
super-operator from L(X) to itself is denoted t x and the subscript is dropped at 
will. 

Whereas the application of an operator to a vector is denoted by simple jux- 
taposition, the operator Y G L(^) obtained by applying the super-operator $ : 
L(X) — > L(y) to an operator X G L(X) is always denoted with parentheses: 
Y = $(X). Similarly, whereas operator composition is denoted by simple juxta- 
position, the super-operator T : L(A') — > ~L{Z) obtained by composing the linear 
operators $ : L(X) L(^) and \& : L(y) L(Z) is denoted T = ^ o $. 

The standard inner product for super-operators $, ^ : L(A') — > L(y) is given 

by 

dim(A') 

where {ei, . . . , edi m (A')} C X is the standard basis for X . That this definition is a 
natural extension of the operator inner product can be argued from the fact that 
the operator inner product satisfies 

dim(A') 

(A, B) = £ (Ae t ,B ei ) 
i=i 

for any two operators A, B : X — >■ 3^- 

Just as the definition of the tensor product is extended in a natural way to 
operators, so too can it be extended to super-operators. 

A super-operator $ : L(X) — > L(y) is said to be 

• Hermitian-preserving if is Hermitian whenever X is Hermitian. 

• positive on K if $(X) is positive semidefinite whenever X G K. 

• positive if $ is positive on H + (A'). 

• completely positive if $ ® tz is positive for every choice of complex Euclidean 
space Z. 

• trace-preserving if Tr($(X)) = Tr(X) for all X. 
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While the definition of complete positivity might seem awkward at first, it is sig- 
nificantly simplified by the observation that $ is completely positive if and only if 
$ §>> tz is positive for a space Z with dim(Z) = dim(A'). In particular, there is no 
need to verify positivity of $ <E> tz for infinitely many spaces Z. 

An important example of a completely positive and trace-preserving super- 
operator is the partial trace. For any complex Euclidean spaces X, y, this super- 
operator has the form Tr x ■ \j{X ®y) — > L(^). It is most easily specified by its 
actions upon product operators X <g) Y for X G ~L>(X), Y G L(^) by the expression 

Tr x (X®Y) = Tr(X)Y. 

The importance of the partial trace stems from the fact that this super-operator 
is used to compute the quantum state of a portion of some larger system whose 
quantum state is already known. 

Just as with operators, the adjoint of a super-operator $ : L(A') — > h{y) is the 
unique super-operator $* : L(^) — > L(A') satisfying 

(Y,$(X)) = {$*(Y),X) 

for every X G L(X), Y G LQ?). 

Every super-operator $ : L(X) —> L(D^) may be expressed in the operator-sum 
notation, whereby there exist operators Ai, . . . , A k , B 1 , . . . , : X -^y such that 

k 

$(x) = j2 A * XB * 
i=i 

for all X, from which it follows that 

k 

for all Y. It holds that <3> is completely positive if and only if it has a symmetric 
operator-sum decomposition, so that 

k 

$(x) = j2 A i XA * 

i=l 

for all X. 

Each super-operator also has a Stinespring representation, whereby there exists 
a complex Euclidean space Z and operators A, B : X — > y <g> Z such that 

$(X) = Tr^AXB*) 

for all X. By analogy to the operator-sum representation, $ is completely positive 
if and only if it has a symmetric Stinespring representation, so that 

$(X) = Tx z {AXA*) 

for all X. If, in addition, $ is also trace-preserving then the operator A must be 
an isometry. 
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The operator-vector and Choi-Jamiolkowski isomorphisms 



In this thesis we make use of an unconventional but useful isomorphism vec that 
associates with each operator A : X — > y a unique vector vec (A) in the complex 
Euclidean space y <g> X. Letting {d, . . . , e di m(A')} C X and {fi, /dim(y)} C ^ 
denote the standard bases of X and y, this isomorphism defined by 

vec (fj e *) = fj ® e i- 

Note that this correspondence is basis-dependent, and we have chosen the standard 
basis in our definition. 

In the matrix representation, the column vector vec (A) is obtained from the 
entries of the matrix A by taking each row of A, transposing that row to form a 
column vector, and then stacking each of these column vectors so as to form one 
large column vector. For example, the vec mapping acts as follows on 2 x 2 matrices: 



a b 
c d 



vec (A) = 



a 
b 
c 
d 



The vec isomorphism has many convenient properties, some of which we list here. 
Each of these identities may be verified by straightforward calculation. 

Proposition 1.1 (Properties of the vec isomorphism). The following hold: 

1. The vec mapping preserves the standard inner products of operators and vec- 
tors. That is, for each A, B : X — )> y it holds that 

(A, B) = (vec(A),vec(B)}. 

2. For any operators A, B , and X for which the composition AXB is defined it 
holds that 

(A ® B T ) vec(X) = vec(AXB). 

3. For each A, B : X ->■ y it holds that 

Tr x (vec(A)vec(B)*) = AB*, 
Try(vec(A)ve C (BY) = (B*A) T . 



4- For each x G X and y G y it holds that 

vec(yx*) = y <8> x. 
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The Choi-Jamiolkowski isomorphism associates with each super-operator $ : 
L(X) — > h(y) a unique operator J($) G L(3^ ® X). Letting {ei, . . . , edim(A')} C A" 
denote the standard basis of Af, this isomorphism defined by 

dim(A') 

J($) = $(e*e*) <g) e^e*. 

As with the vec isomorphism, the Choi-Jamiolkowski isomorphism is basis-dependent 
and it is always defined with respect to the standard basis. 

Given that Ix = e i e h we obtain the following alternate characterization 

of the Choi-Jamiolkowski isomorphism: 

J($) = ($ ® l*) (vec(I x ) vec(I x )*). 

Like the vec isomorphism, the Choi-Jamiolkowski isomorphism has many convenient 
properties, some of which we list here. 

Proposition 1.2 (Properties of the Choi-Jamiolkowski isomorphism). The follow- 
ing hold for all super- operators $ : L(Af) — > L(3^).' 

1. The Choi-Jamiolkowski isomorphism preserves the standard inner product of 
super- operators and operators. That is, for each $, \1/ : li(X) — > L(^) it holds 
that 

($,¥) = <J($),J(¥)>. 
U. For eac/i X e L(Af) it ZioZds £/iat 

=Tr* ((/ y ®X T ) J($)) . 

5. // $ /ias operator-sum and Stinespring representations given by 

k 

<&(X) = ^A i XB* and $(X) = Tr z (AXB*) 
i=i 

for all X then it holds that 

k 

J($) = ^vec(A i )vec( J B i )* and J($) = Tr z {vec(A) vec(S)*), 

i=l 

respectively. 

4- $ is Hermitian-preserving if and only if </(<&) is Hermitian. 

5. $ is completely positive if and only if </($) is positive semidefinite. 

6. $ is trace-preserving if and only ifTry(J(<&)) = Ix- 

A generalization of item [2] is proven in Proposition 19.41 of Chapter [91 An addi- 
tional identity involving the Choi-Jamiolkowski isomorphism appears later in this 
section in Proposition 11.31 



17 



Operator decompositions 



There are two operator decompositions that are so fundamental to quantum infor- 
mation that, like the tensor product, they are often used implicitly. Indeed, in this 
thesis we make little explicit mention of these decompositions, yet our discussion 
always assumes a working knowledge of their existence. 

The Singular Value Theorem states that every operator A : X — > y has 
at least one singular value decomposition, whereby there exist orthonormal sets 
{xi, . . . , x r } C X and {y±, . . . , y r } C y and positive real numbers si, . . . ,s r G K 
such that 

r 
i=l 

Here r is the rank of the operator A. The real numbers called the 

singular values of A. Sometimes, the vectors y±, . . . , y r are called the left singular 
vectors of A, whereas called the right singular vectors of A. 

The Spectral Theorem implies that an operator A e L(^) is Hermitian if and 
only if there exists at least one spectral decomposition whereby there is an orthonor- 
mal set {xi, . . . , x r } C X and real numbers X±, . . . ,X r such that 

r 

A — ^ ^ \ r XiX^ . 
i=l 

Again, r is the rank of A. The real numbers Ai, . . . , A r are called the eigenvalues 
of A and the vectors x\, . . . , x r are called the eigenvectors of A. 

It is easy to see that a Hermitian operator A is positive semidefinite if and only 
if each of its eigenvalues is nonnegative. It follows immediately from the Spectral 
Theorem that every Hermitian operator A has a Jordan decomposition whereby 
there exist positive semidefinite operators P and Q with the property that 

A = P-Q 

and PQ = — that is, P and Q act on orthogonal subspaces. The absolute value 
\A\ of A is a positive semidefinite operator defined via the Jordan decomposition 
by 

\A\ = P + Q. 

A positive semidefinite operator P is called a projection if each of its eigenvalues 
is either zero or one. 



Norms of vectors and operators 

For each real number p > 1 and each vector u = (a±, . . . , a n ) in some n-dimensional 
complex Euclidean space, the vector p-norm \\u\\ p of u is defined by 
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with || it || oo given by 



|u||oo = lim ||u|L = max |o!j|. 



These norms satisfy ||u|| p < \\u\\ q whenever p > q, and it also holds that 

IMIi < \/n||?/||2 < w||u||oo- 

The standard Euclidean norm ||u|| is an instance of the vector p-norm with p = 2, 
so that ||u|| = || u || 2 for all u. 

Each vector p-norm induces a norm on operators via the singular value decom- 
position. In particular, the Schatten p-norm \\A\\ P of an operator A is defined as 
the vector p-norm of the singular values of A. As such, the Schatten p-norms inherit 
many properties from the vector p-norms. For example, \\A\\ p < \\A\\ q whenever 
p > q and 

II ^4 l|i < v^ll^-lh < ^ || ^4 1| 

for operators A e L(A') with dim(X) = n. 

In this thesis we are interested only in the Schatten p-norms for the values 
p = 1,2, oo. The Schatten p-norm for p = 1 is also called the trace norm and is 
alternately denoted ||A|| Tr . 

The Schatten p-norm for p = 2 is also called the Frobenius norm and is al- 
ternately denoted ||^4||f- The Frobenius norm is merely the standard Euclidean 
norm for complex Euclidean spaces applied to the complex vector space of linear 

operators: 

||A|| F = a/ (A, A) = y/(vec(A),vec(A)) = ||vec(A)||. 

The Schatten p-norm for p = oo is also called the standard operator norm and 
is alternately denoted without any subscript by \\A\\. The operator norm is induced 
from the standard Euclidean norm for vectors: 

|| A || = max || Au || . 

In this thesis we prefer the notation ||A|| Tr , ||A|| F , and \\A\\ to ||A||i, ||A|| 2 , and 

II A lloo- 

We now prove a simple identity involving the trace norm of the Choi- Jamiolkowski 
representation of a completely positive and trace-preserving super-operator. 

Proposition 1.3. For any completely positive and trace-preserving super- operator 
$ : L(X) ->■ L(y) it holds that || J($)|| T r = || Ikr = dim(X). 

Proof. By definition, we have 

J($) = ($®l A ,)(vec(/ A .)vec(/ A .)*), 
J($*) = ($* ® l y ) (vec(Iy) vec(Iy)*). 
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As J($) is positive semidefinite, so too must be </($*), from which we obtain 

||J($)|| Tr = Tr(J($)), 
|| J($*)|| Tr = Tr( J ($*)). 

As $ is trace-preserving, it holds that 

Tr(J($)) = vec(i*)* vec(i*) = dim(A'). 

Moreover, it is easy to verify that <&*(Iy) = from which it follows that 

Tr(J($*)) = Tr($*(/ y )) = Tr(I x ) = dim(X). 

□ 

1.2.2 Convexity 
Caratheodory's Theorem 

A subset C of a real vector space W 1 is called convex if for every x,y G C and every 
real number a G [0, 1] it holds that 

ax + (1 — Qt)y G C. 

For vectors Ui, . . . , v m G M" and nonnegative real numbers «i, . . . , a m > with 

m 

i=i 

the vector 

m 
i=l 

is called a convex combination ofv±, . . . ,v m . For an arbitrary set 5* C M n , the convex 
hull of S is the subset of M™ consisting of all convex combinations of elements in 
S. Caratheodory's Theorem is a useful result that bounds the number of terms in 
the sum of a given convex combination. 

Fact 1.4 (Caratheodory's Theorem). Let S C W 1 be an arbitrary set. Every ele- 
ment x of the convex hull of S can be written as a convex combination of no more 
than n + 1 elements of S . 

Proofs of Caratheodory's Theorem can be found, for example, in Rockafellar 
|Roc70] or Barvinok |Bar02j . 
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Separation Theorem 

The fundamental Separation Theorem tells us that every pair of disjoint convex 
sets may be separated by a hyperplane. There are many variants of the Separation 
Theorem, each of which differs only slightly based upon properties of the sets in 
question such as whether or not they are open, closed, bounded, or cones. (A subset 
K C M n is called a cone if for every x G K and every positive real number A > 
it holds that Xx G K.) The following variant of the Separation Theorem serves all 
our needs in this thesis. 

Fact 1.5 (Separation Theorem). Let C,D G M. n be nonempty disjoint convex sets 
such that D is open. There exists a vector h G MJ 1 and a real number a G R with 
the property that 

(h, x) > a for all x G C, 
(h, y) < a for all y G D. 

Moreover, if C is a cone then we may take a = 0. 

Proof. It follows from Theorem 11.3 of Rockafellar |Roc70] that there exists a 
nonzero vector h G M n and a real number a G K with (h, x) > a > (h, y) for 
all x G C and y G D. Suppose toward a contradiction that there is a y' G D 
with (h,y') = a. Choose any vector b with (h,b) > 0, so that (h, y' + b) > a. By 
rescaling b and using the fact that D is open, we may assume y' + b G D, which 
contradicts the fact that (h,y) < a for all y G D. 

Next, suppose that C is a cone and let a 1 denote the infimum of (h,x) over all 
x G C, so that 

(h,x) > a' > a > (h,y) 

for all x G C and y G D. Our proof that a' = follows that of Theorem 11.7 of 
Rockafellar |Roc70j . First, suppose toward a contradiction that a' < and choose 
x G C with (/i, x) < 0. Then (h, Xx) can be made into an arbitrarily large negative 
number by an appropriately large choice of A, contradicting the lower bound a on 
the infimum a'. Conversely, suppose toward a contradiction that a' > and choose 
A small enough so that (h, Xx) < a', contradicting the definition of a'. □ 

Convexity and Hermitian operators 

As noted in Section 11.2.11 the set H(A*) of all Hermitian operators is a real vec- 
tor space of dimension dim(X) 2 . As such, the formalism of convexity translates 
without complication to Hermitian operators. For example, the set H + (A') of all 
positive semidefinite operators within H(X) is a closed convex cone. Moreover, 
Caratheodory's Theorem and the Separation Theorem have natural analogues in 
the context of H(X). Indeed, it is worth restating Fact 11.51 (Separation Theorem) 
in terms of Hermitian operators. 
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Fact 1.6 (Separation Theorem, Hermitian operator version). Let C,D C H(X) 

be nonempty disjoint convex sets such that D is open. There exists a Hermitian 
operator H G H(X) and a real number «6l with the property that 

(H,X) > a for all X G C, 
(H, Y) < a for all Y G D. 

Moreover, if C is a cone then we may take a — 0. 

1.2.3 Quantum information 

Quantum states 

Associated with each d-level physical system is a ci-dimensional complex Euclidean 
space X. The quantum state of such a system at some fixed point in time is 
described uniquely by a positive semidefinite operator p G H + (A') with trace equal 
to one. Such an operator might also be called a density operator. 

A quantum state p called pure if p has rank one — that is p = uu* for some 
unit vector u G X. It follows immediately from the Spectral Theorem that every 
quantum state may be written as a convex combination (or probabilistic ensemble) 
of orthogonal pure states. 

Two distinct physical systems with associated complex Euclidean spaces X and 
y may be viewed as a single larger system with associated complex Euclidean space 
X®y. If p G Yl + (X®y) is the state of this larger system then the state a G U + (X) 
of the subsystem associated only with X is given by the partial trace 

<r = Tr y (j>). 

Conversely, if the systems with associated spaces X and y are in states a and a' 
respectively then it must hold that the state p G H + (X ® y) of the larger system 
satisfies a = Tr^(p) and a' = Tr^(p). Any state p meeting these conditions is said 
to be consistent with a and a'. If there is no correlation or entanglement between 
these two subsystems then p is given by the tensor product 

p = a <S> cr' . 

Such a state is called a product state. For each a there are many states p consistent 
with a other than product states. For example, each state a G H + (X) may be 
purified. In other words, there always exists a complex Euclidean space Z with 
dimZ = rank(cr) and a pure state u G X Cg> Z such that 

a = Tr z(uu*). 

The state uu* is called a purification of a. 



22 



Quantum operations 

A quantum operation is a physically realizable discrete-time mapping (at least in an 
ideal sense) that takes as input a quantum state p G H + (X) of some system X and 
produces as output a quantum state o G H + (^) of some system y. Every quantum 
operation is described uniquely by a completely positive and trace-preserving super- 
operator \1> : L(X) —> L(3^)? so that, for each input state p, the corresponding 
output state a is given by 

a = 

As noted in Section ll.2.1[ each quantum operation \l/ has a Stinespring representa- 
tion whereby there exists a complex Euclidean space Z with dim(Z) = rank(J(\E')) 
and an isometry A : X — > y <g> Z such that 

$ : X h->- Tr z (AXA*). 

Naturally, two quantum operations $6 : L(X b ) — > L(3^b) for b = 1,2 acting upon 
distinct physical systems may be viewed as one large quantum operation acting 
upon one large system via the tensor product: 

$! ® $ 2 : L(X X ® X 2 ) -> L(^i <8) y 2 )- 

Using our shorthand notation, this tensor product can alternately be written 

$i...2 : L(^... 2 ) > LCVi... 2 ). 

Quantum measurements 

Many applications of quantum information necessitate the ability to extract classi- 
cal information from a quantum state of some physical system X. This extraction 
is accomplished via quantum measurement. Each measurement is uniquely specified 
by a finite set T of measurement outcomes and a finite set {P a } ae r C H + (,Y) of 
positive semidefinite measurement operators obeying the condition 

aer 

(These measurement operators are sometimes called POVM elements for historical 
reasons — we avoid that terminology in this thesis.) For any state p of the system 
X, the probability with which the measurement {P a } yields a particular outcome 
a G T is given by the inner product 

Pr[{P a } yields outcome a on p] = (P a ,p). 

It is convenient to adopt the convention that the physical system associated 
with X is destroyed when the measurement is applied. There is a simple and 
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common modification of the formalism of quantum measurements that admits non- 
destructive measurements that do not destroy the system upon which they act, but 
we do not require such a formalism in this thesis. 

A measurement is called projective if each of its measurement operators is a 
projection. An arbitrary measurement {P a }a&r C H + (A') may be "simulated" by a 
projective measurement in the sense that there always exists a complex Euclidean 
space Z, an isometry A : X — > X ® Z and a projective measurement {Il a } aer C 
H + (X ® Z) with the property that 

(P a ,p) = (U a ,A P A*) = (A*U a A,p) 

for every quantum state p G H + (X). 
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Part I 
Quantum Strategies 
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Chapter 2 



Introduction to Quantum 
Strategies 

In this chapter we develop two distinct formalisms for quantum strategies. We 
begin with a naive operational formalism in Section I2.1[ and we provide a new 
formalism in Section 12.21 

2.1 Operational formalism 

In this section we develop an intuitive, operational formalism for quantum strategies 
and discuss some properties and problems associated with that formalism. 

2.1.1 Formal definitions 

At a high level, a strategy is a complete description of one party's actions in a 
multiple-round interaction involving the exchange of quantum information with 
one or more other parties. For convenience, let us call this party Alice. As we are 
only concerned for the moment with Alice's actions during the interaction, it is 
convenient to bundle the remaining parties into one party, whom we call Bob. 

From Alice's point of view, every finite interaction decomposes naturally into 
a finite number r of rounds. In a typical round a message comes in, the message 
is processed, and a reply is sent out. Naturally, this reply might depend upon 
messages exchanged during previous rounds of the interaction. To account for such 
a dependence, we allow for a memory workspace to be maintained between rounds. 

In order to facilitate discussion of the distinct strategies available to Alice for 
a given interaction, it is convenient to adopt the convention that the interaction 
specifies the number r of rounds and the size of each message in the interaction. 
In particular, individual strategies for Alice are not free to specify messages whose 
number or size deviates from those dictated by the interaction. By contrast, an 
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interaction does not dictate the size of the memory workspace to be used by each 
party. In particular, different strategies for Alice may call for different amounts of 
memory between rounds, and there is no limit on the amount of memory workspace 
a strategy may use. (However, we shall see in Chapter |3]that every possible strategy 
can be implemented with a reasonable fixed amount of memory workspace.) 

The complex Euclidean spaces corresponding to the incoming and outgoing 
messages in an arbitrary round i shall be denoted X^ and 3^, respectively. The 
space corresponding to the memory workspace to be stored for the next round 
shall be denoted Z^. As the size of each message is fixed by the interaction, the 
dimension of the spaces Xi,...,X r and yi,...,y r are also fixed by the interaction. 
Conversely, the dimension of the spaces Z\ , . . . , Z r may be arbitrarily large and 
these dimensions may vary among different strategies for the same interaction. 

Thus, in a typical round i of the quantum interaction, Alice's actions are faith- 
fully represented by a quantum operation 

: L(Xi ® Zi-x) ->• L(^j ® Zi). 

The first round of the interaction is a special case: there is no need for an incoming 
memory space for this round, so the quantum operation $ x has the form 

$! : L(Xx) — »• L(yi ® Zi). 

The final round of the interaction is also a special case: there is no immediate need 
for an outgoing memory space for this round. However, the presence of this final 
memory space better facilitates the forthcoming discussion of strategies involving 
measurements. Thus, the quantum operation <3> r representing Alice's actions in the 
final round of the interaction has the same form as those from previous rounds: 

$ r : L(X r ® Z r _{) L(y r ® Z r ). 

In order to extract classical information from the interaction, it suffices to permit 
Alice to perform a single quantum measurement on her final memory workspace. 
Sufficiency of a single measurement at the end of the interaction follows from foun- 
dational results on mixed state quantum computations |AKN98j . which tell us that 
any quantum operation calling for one or more intermediate measurements can be 
efficiently simulated by an operation with a single measurement at the end. 

Discussion thus far in this section is aptly summarized by the following formal 
definition. 

Definition 2.1 (Operational definition of a strategy). Let X\, . . . ,X r and y±, . . . , y r 
be complex Euclidean spaces. An operational r-round non-measuring strategy for 
an interaction with input spaces Xi, . . . , X r and output spaces 3^, . . . , y r consists 
of: 

1. complex Euclidean spaces Zi, . . . , Z r , called memory spaces, and 
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Figure 2.1: An r- round strategy. 



2. an r-tuple of quantum operations ($1, . . . , <3> r ) of the form 

$1 : L(#i) -> LQ>i (8) 2i) 

$i : L(^ <g> -> L(y< ® 2i) (2<*<r). 

An operational r-round measuring strategy with outcomes indexed by a consists of 
items 1 and 2 above, as well as: 

3. a measurement {P a } on the last memory space Z r . 

Figure 12.11 illustrates an r-round non-measuring strategy. □ 

Having formalized the notion of a strategy for Alice, it is straightforward to 
formalize the notion of a compatible strategy for Bob. Essentially, Bob must provide 
to Alice incoming messages with corresponding spaces X\ , . . . , X r and accept her 
outgoing replies with corresponding spaces y±, . . . ,y r . 

Definition 2.2 (Operational definition of a co-strategy). Let A\, . . . , X r and 3^i, ■ ■ ■ , y r 
be complex Euclidean spaces. An operational r-round non-measuring co-strategy 
for an interaction with input spaces Xi, . . . , X r and output spaces 3^i, • • • , y r consists 
of: 

1. complex Euclidean memory spaces Wo, . . . , W r , 

2. a quantum state p £ H + (A' 1 <g> Wo), and 

3. a r-tuple of quantum operations . . . , \l/ r ) of the form 

% : Lty (8) W_i) -> L(X i+1 ® W) (1 < i < r - 1) 
* r :L(y r ®W r _i)->L(W r ). 

An operational r-round measuring co-strategy with outcomes indexed by 6 consists 
of items 1, 2 and 3 above, as well as: 

4. a measurement {Q;,} on the last memory space W r . 

Figure 12.21 depicts the interaction between a r-round strategy and co-strategy. □ 
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Figure 2.2: An interaction between a r-round strategy and co-strategy. 

2.1.2 Immediate observations 
Generality of the definition 

Our definition of a strategy allows for trivial input or output spaces with dimension 
one — such spaces correspond to empty messages. Hence, simple actions such as the 
preparation of a quantum state or performing a measurement without producing a 
quantum output can be viewed as special cases of strategies. 

While we require that Alice receive the first message and send the last message, 
any interaction that deviates from this format can easily be recast to fit this mold 
at the possible expense of one additional round of messages, some of which might 
be empty. 

Indeed, our definition is flexible enough that any r-round co-strategy may equiv- 
alently be viewed as a (r + l)-round strategy with input spaces C, J^, . . . , y r and 
output spaces . . . , X r , C. It is only for later convenience that we have chosen to 
define strategies and co-strategies as distinct objects. 



Restriction to finite interactions 

In this thesis we restrict our attention to interactions in which the size and number 
of messages exchanged is fixed. As we shall see in Section 12. 2\ this restriction per- 
mits us the luxury of representing every conceivable strategy for a given interaction 
by a single positive semidefinite operator of fixed finite dimension. Many of the re- 
sults proven in this thesis rely crucially upon the finiteness of these representations 
of strategies. 

At first, this restriction might seem overly constraining. For example, one might 
reasonably wish to study strategies for, say, coin-flipping protocols wherein two 
parties continue exchanging messages until they reach an agreement. With each 
round of messages, this agreement might be reached only probabilistically according 
to some quantum measurement. Such an interaction is infinite in the sense that it 
admits strategies with the property that, for every number r of rounds, there is a 
nonzero probability that it will not terminate in r rounds or fewer. (Indeed, this 
scenario also admits silly strategies in which the interaction never terminates.) To 
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forbid interactions such as this might seem careless, as our study aspires to absolute 
generality for quantum strategies. 

While it would certainly be desirable to include in our formalism potentially in- 
finite interactions, the generality that we sacrifice in the name of finiteness is less of 
a liability than it might at first seem. Many "infinite" interactions of any interest- 
such as the previous coin-flipping example — will terminate after a finite number of 
messages with probability 1. Interactions such as this can be approximated to ar- 
bitrary precision with only a finite number of messages simply by truncating the 
interaction appropriately. 

Admittedly, the precise extent to which generality is sacrificed by our restriction 
to finite interactions remains to be seen. But it cannot be denied that the set of finite 
interactions encompasses a very wide swath of interesting quantum interactions. In 
the real world, all interactions are finite. 

Restriction to isometric quantum operations 

When convenient, we shall assume without loss of generality that each of Alice's 
quantum operations $j are actually linear isometries, meaning that 

: X ^ AiXA* 

for some linear isometry A4. Similarly, we may assume that Bob's initial state po is 
actually a pure state, and that each of Bob's quantum operations have the form 

: X ^ BiXB* 

for some linear isometry Bi. Moreover, if Alice's or Bob's strategy is a measuring 
strategy then we may also assume that the measurements {P a } for Alice and {Qb} 
for Bob are actually projective measurements, meaning that each P a and Qb is 
actually a projection operator. 

These assumptions follow from the Stinespring representation for quantum op- 
erations mentioned in Section 11.2.11 Specifically, an arbitrary quantum operation 
$ : L(Af) — > lj(y) may be written Tt^(UXU*) for some auxiliary space 

H and some isometry U : X — > y <g) T-L. As the memory spaces for strategies may 
be arbitrary, the auxiliary space H for a given round i may be "absorbed" into the 
private memory space Z^ of Alice's quantum operation <&j, thus removing the need 
for the partial trace over 7-L and leaving us with $j : X 1— >■ AiXA* as desired. 

The justification for projective measurements is similar: Naimark's Theorem 
implies that any measurement on the final memory space Z r may be simulated 
by a projective measurement on Z r £g> % for some auxiliary space H. As before, 
7-L may be "absorbed" into the definition of Z r , leaving us with only a projective 
measurement on this space. 
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Undesirable properties of the operational formalism 



Definition [2J] (Operational definition of a strategy) is very natural in the sense that 
it is clear that any conceivable actions taken by Alice during an interaction can be 
represented by a strategy of that form. Unfortunately, this definition has several 
undesirable mathematical properties that make this formalization cumbersome to 
use. 

Picking an example arbitrarily, it is easy to see that the set of all strategies for a 
given interaction lacks a convenient distributive property for probabilistic combina- 
tions of strategies. In particular, suppose Alice plays according to $ = ($1, . . . , $ r ) 
with probability p, otherwise she plays according to $' = . . . , What is 
the r-tuple of quantum operations that describes this probabilistic combination of 
strategies? In an ideal world, this r-tuple would be given by the simple convex 
combination 



where the ith component of the resulting r-tuple is given in the usual way by 



Alas, this identity does not always hold. Indeed, unless ($1, . . . , $ r ) and (<&[, . . . , $' r ) 
happen to agree on the choice of memory spaces Z 1 ,...,Z r , the above convex 
combination is not even well-defined! Of course, this issue is easily overcome by 
"padding" the smaller memory spaces so that their dimensions agree with those of 
the larger spaces. But this frivolous observation ignores the larger problem. 

Indeed, it is easy to exhibit a pair of strategies for which the above identity does 
not hold, even when the two strategies agree on the dimension of their memory 
spaces. The simple example we present here is a toy classical strategy expressed in 
the quantum formalism. 

Example 2.3 (Lack of distributive property). Consider a two-round interaction 
wherein Alice's incoming messages are empty. Letting p a ,Pp denote two distinct 
quantum states, the 2-tuples (p a , p a ) and (pp,pp) each specify a silly strategy for 
Alice that uses no memory space and returns the same state in both rounds. Sup- 
pose Alice plays one of (p a , p a ) and (pp,pp) uniformly at random. At the end of 
this interaction, Bob has received from Alice a combined state 



P$ + (1 — £>)$' 



p<S>i + (1 -p)% 



1 1 

^Pa ® Pa + ^Pp® Pp. 

But the 2-tuple resulting from the naive computation 



^Pa,Pa) + ^(Pp,P?) = {^-^ 




results in strategy for Alice in which Bob is instead left with the state 



1111 

~Pa <E> Pa + -7P(3 <8> Pp + ~Pa <S> Pp + ~.Pp ® Pa 
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at the end of the interaction. As these final states for Bob are not equal, it follows 
that the naive convex combination l/2(p a , p a ) + l/2(pp, pp) does not denote the 
desired probabilistic combination of the strategies described by (p a , p a ) and (pp, pp). 

□ 

This lack of a convenient distributive property suggests a cumbersome nonlinear 
dependence of probabilistic combinations p$ + (1 — of strategies upon their 
constituent strategies $, Other examples of undesirable properties include: 

Strategies are not unique. There exist pairs of strategies that differ in each 
component, yet they specify the same actions for an interaction in the sense 
that no interacting co-strategy could possibly distinguish the two. 

This lack of uniqueness suggests that our operational formalism is carrying 
around some unnecessary information, which typically leads to unnecessary 
complication. 

Outcomes depend nonlinearly on strategies. For a multi-round interaction 
between Alice and Bob, the probability of obtaining a given measurement 
outcome at the end of the interaction depends multilinearly upon each com- 
ponent $j of Alice's strategy and of Bob's strategy. But the dependence of 
this probability as a function of the two r-tuples ($1, . . . , $ r ) and . . . , \I/ r ) 
is highly nonlinear. 

As a consequence, existing algorithms for standard linear and semidefinite 
optimization problems cannot be employed to efficiently compute some im- 
portant properties of strategies, such as the maximum probability with which 
a given strategy can be forced to yield a given measurement outcome. 

2.2 New formalism 

In the previous section we saw that the operational representation for quantum 
strategies has several drawbacks. In this section, we develop a new representation 
for quantum strategies that rectifies these problems. 

2.2.1 Formal definitions 

We begin with several new definitions for non-measuring and measuring quantum 
strategies and co-strategies. 

Definition 2.4 (New formalism for non-measuring strategies). Let (<&i, . . . , <& r ) 
be an operational representation of a non-measuring strategy for input spaces 
Xi,...,X r and output spaces y x , . . . ,y r . Our new representation for quantum 
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Figure 2.3: The super-operator H associated with a three-round strategy. 

strategies associates with every such operational strategy a single positive semidef- 
inite operator 

Q G H + (^l...r <8> Xl...r) 

via the following construction. Let 

S : L(Xi... r ) -> L(^l...r) 

denote the super-operator composed of $i,...,$ r as suggested by Figure [2731 
Specifically, S is the r-fold composition of $1, . . . , $ r on the memory spaces . . . , 2 r _i 
followed by a partial trace on Z r . With some abuse of notation, this composition 
may be expressed succinctly as 

5 = Tr 2r o $ r o ■ ■ • o $!. 

(Here a tensor product with the identity super-operator 1 on the appropriate spaces 
is implicitly inserted where necessary in order for this composition to make sense.) 

The r -round non-measuring strategy is given by Q = J(H). An operator Q is a 
valid representation of an r-round non-measuring strategy if and only if it has this 
form. □ 

Definition 2.5 (New formalism for measuring strategies). With each operational 
representation ($i, . . . , $ r , {P a }) of an r-round measuring strategy for input spaces 
Xi, . . . , X T and output spaces y>i, . . . ,y r we associate a finite set 

{Q a } C H + CA.. r ® Xx_ r ) 

of positive semidefinite operators via the following construction. For each measure- 
ment outcome a let 

E a = r a o $ r o ■ ■ • o $! 

where the super-operator r a is given by 

r a :X^Tr Zr ((P a ® /j^JX). 

(Compare: for non-measuring strategies we defined H via the partial trace Tr^. 
For measuring strategies we define E a via T a instead of the partial trace.) 

The r-round measuring strategy {Q a } is given by Q a = J(H a ) for each a. A set 
{Qa} of operators is a valid representation of an r-round measuring strategy if and 
only if it has this form. □ 
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Figure 2.4: The super-operator S associated with a two-round co-strategy. 



Definition 2.6 (New formalism for co-strategies). Non-measuring co-strategies are 
defined in the same manner as non-measuring strategies, except the operator Q is 
given by Q = J(5*) instead of J(H). Similarly, measuring co-strategies are defined 
in the same manner as measuring strategies, except the operators {Q a } are given 
by Qa = J(^-a) ms t ea d of J(S a ) for each a. 

Let us clarify this new representation for co-strategies. Let (p , ^1, • • • , ^r) 
denote an operational representation of an r-round non-measuring co-strategy for 
input spaces Xi, . . . ,X r and output spaces y±, . . . , y r , so that 

Po eH + (x 1 ®w ) 

% : L(y { ® Wi-i) ->• L(^ +1 ig) Wi) (1 < « < r - 1) 
* r : L(^ r <8> W r _i) ->• L(W r ). 

The induced super-operator H : L(3^i... r ) — >• L(A' 1 r ) is depicted in Figure I2T41 for 
the case r = 2. The adjoint super-operator has the form S* : L(A' 1 r ) — > L(^i... r )- 
In particular, we have 

/(HjEH+^r^u), 
J(S*) GH + (A..r® ^... r ). 

By taking Q = •/(H*), we ensure that strategies and co-strategies for the same 
input and output spaces lie within the same space H(3^i... r ® Xi_ r ) of Hermitian 
operators — with 3^i...r occurring before X\_ T in the tensor product. 

Incidentally, it is instructive to note that J(S) is a valid representation of an 
(r + l)-round strategy for input spaces C, 3^i, • • • , y r and output spaces X 1: . . . , X r , C 
according to Definition 12.41 

Conversely, if A : L(Af L .. r ) — > L(3^i... r ) is a super-operator for which J (A) is 
an r-round strategy for input spaces A\, . . . , X r and output spaces y±, . . . , y r then 
J(A*) denotes a valid (r + l)-round co-strategy for input spaces C, 3^i, ■ ■ ■ ,y r and 
output spaces X±, . . . , X r , C. □ 



2.2.2 Immediate observations 



Some basic properties of this new representation for quantum strategies may be 
pointed out immediately. However, a more comprehensive discussion of basic prop- 
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erties of strategies must wait until Section |3~4| at which point the results of Chapter 
[3] are employed to establish with ease some additional basic properties. 

Zero-round strategies 

It is convenient to adopt the convention that an r-round non-measuring strategy or 
co-strategy Q denotes the scalar 1 when r = 0. Similarly, if {Q a } is a zero-round 
measuring strategy or co-strategy then {Q a } denotes a finite set of nonnegative real 
numbers that sum to one. 

Representation in terms of isometries 

Let (<&i, . . . , $ r ) be an operational description of an r-round strategy. As discussed 
in Section al. 21 we may assume without loss of generality that each of the quantum 
operations $j is actually an isometric operation, so that $j : X i— > AiXA* for some 
isometry A4. In this case, the super-operator 5 in Definition 12.41 (New formalism 
for non-measuring strategies) has the form 

5:14 Tr z r (AX A*) 

where A : X\___ r — > yi... r ®Z r is an isometry defined as the composition of A\, . . . , A r 
on the memory spaces Z\, . . . , Z r -\. With some abuse of notation, this composition 
may be expressed succinctly as 

A = A r A r _i ■ ■■ A 2 Ai 

where a tensor product with the identity operator / on the appropriate spaces is 
inserted where necessary in order for this product to make sense. 

Under the new formalism for strategies, the operator Q representing . . . , $ r ) 
has the special form 

Q = J(S) = Tr Zr {vec{A)vec(Af). 

For a measuring strategy with measurement {P a }, each element of {Q a } may be 
written 

Qa = Tr 2r ((P a <g) Iy^x^J vec(A) vec(A)*) . 

If Q is a co-strategy, rather than a strategy, then by Definition 12.61 (New for- 
malism for co-strategies) we have 

Q = J(E*) = Tr Zr (vec(A*)vec(A*)*) 

for non-measuring co-strategies and 

Qa = Trz r ((Pa ® hi..M... r ) vec(A*) vec(A*)*) 

for measuring co-strategies. 
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Measuring strategy elements sum to a non-measuring strategy 

We conclude this chapter with an exercise that should help to wet our feet before 
diving into Chapter |3j 

Proposition 2.7. A set {Q a } of positive semidefinite operators is a measuring 
strategy or co-strategy if and only if ^ a Q a is a non-measuring strategy or co- 
strategy, respectively. 

Proof. The proof for co-strategies is completely symmetric to the proof for strate- 
gies, so we only prove the proposition for strategies. 

The "only if" portion of the proof is straightforward. As {Q a } is a measuring 
strategy, there is an r-tuple (Ai,...,A r ) of isometries and a measurement {P a } 
with the property that each Q a is given by 

Q a = Tr Zr ((P a <g) I yi ... r ® Xl ... r ) vec(A) vec(A)*) 

where the isometry A is given by the r-fold composition A = A r ■ ■ ■ A± is as noted 
earlier in this section. Then by linearity we have 

= Ti Zr (vec(A)vec(A)*), 

which is an r-round non-measuring strategy as required. 

We now proceed to the "if" portion of the proof. As Yl a Qa is a non-measuring 
strategy, there is an r-tuple (A\, . . . , A r ) of isometries with the property that 

E^ = Tr ^ (vec(A)vec(A)*) 

a 

where again the isometry 

A : Xx_ r -»■ y u _ r <g> Z r 

is given by A = A r ■ ■ ■ A\. Let 

3 : Z r ->■ ^ L .. r <g> Afi... r 

be the operator obtained from A by swapping the spaces X\... r and .2^.. (In other 
words, S is the image of A under the mapping (y ® z)x* (y <g) on standard 
basis states.) We may thus write 

E<2« = Tr ^ (vec(5) vec(5)*) = SS*. 

a 

Let T denote the Moore-Penrose pseudo- inverse of S, so that 

ST = T*S* = U s 
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where Us denotes the projection onto the image of S. For each outcome a we let 
P a = TQ a T*. As Q a is positive semidefinite, it is clear that P a is also positive 
semidefinite. Observe that Q a = SP a S*, which follows from 

SP a S* = STQ a T*S* = U s Q a U s = Q a 

where the final equality follows from the fact that the image of Q a is contained in 
the image of S. Then 

Qa = SP a S 

= Tx Zr (vec(SP a )vec(S)*) 

= Ti Zr ((P a ® I yi ... M .J vec(S) vec(S)*) 

= Ti Zr ({P a ® I yi . M .J vec(A) vec(A)*) . 

As Ea Qa = Tr 2r (vec(A) vec(A)*) , it follows that 

a 

As each P a is positive semidefinite, the set {P a } is a quantum measurement and 
hence {Q a } is a measuring strategy. □ 
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Chapter 3 

Three Important Properties 



In this chapter we establish three fundamental and powerful properties of our new 
representation for quantum strategies. For ease of reference, we begin with rigorous 
statements for each of these properties. Their proofs appear in the subsequent 
sections, and the chapter concludes with a short list of other basic properties of 
strategies. 

The first of these three properties establishes a bilinear dependence of the prob- 
ability of a given measurement outcome upon the interacting strategy and co- 
strategy. (By contrast, recall that the operational representation for strategies led 
to a nonlinear dependence of outcomes on strategies in Section [2.1.21 ) 

Theorem 3.1 (Interaction output probabilities). Let {Q a } be a measuring strategy 
and let {Rb} be a compatible measuring co-strategy. For each pair (a, b) of measure- 
ment outcomes, the probability with which the interaction between {Q a } and {Rb} 
yields (a,b) is given by the inner product (Q a ,Rb)- 

The second property provides a recursive characterization of r-round strategies 
in terms of (r — l)-round strategies. 

Theorem 3.2 (Characterization of strategies). Let Q G H + (3^i... r <8> Xi... r ) be an 
arbitrary positive semidefinite operator. The following hold: 

1. Q is an r-round strategy if and only if there exists an (r — 1) -round strategy 
R with the property that Try r (Q) = R® lx T - Moreover, R is obtained from Q 
by terminating that strategy after r — 1 rounds. 

2. Q is an r-round co-strategy if and only if there exists an operator R for which 
Q = R®Iy r and Trx r (R) is an (r — l)-round co-strategy. Moreover, Tr^ r (i?) 
is obtained from Q by terminating that co-strategy after r — 1 rounds. 

3. Every r-round strategy or co-strategy Q may be described by isometries in 
such a way that the final memory space has dimension equal to rank(Q) • 
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The recursive characterization of Theorem 13.21 may be equivalently expressed as 
an explicit list of linear constraints on positive semidefinite operators. These linear 
constraints are efficiently checkable and hence amenable to standard algorithms for 
semidefinite optimization problems. 

Theorem 13.21 (Characterization of strategies, alternate version). An operator Q G 
H + (3^i...r ® Xx...r) ^ an r -round strategy if and only if there exist operators 

for k — 1, . . . , r — 1 such that 

^y k ..AQ) = Qk-i®ix k ... r (2<k<r), 
Tl yi...r(Q) = Ixi... r - 

Moreover, each Q k is obtained from Q by terminating that strategy after k rounds. 

It follows immediately from this characterization that the sets of strategies and 
co-strategies are compact and convex. For completeness, we provide a formal proof 
of this important fact as Proposition 13.151 in Section 13.41 

Our third property of strategies provides a formula for the maximum probability 
with which some co-strategy can force a given measuring strategy to output a given 
measurement outcome. Whereas the previous two properties are fundamental — 
both in their statements and their proofs — this third property is more advanced. 
It's proof relies crucially upon the previous two properties, as well as more advanced 
ideas from analysis such as convex polarity or semidefinite optimization duality. 

Theorem 3.3 (Maximum output probability). Let {Q m } be a measuring strategy. 
For each outcome m, the maximum probability with which {Qm} can be forced to 
output m by a compatible co-strategy is given by 

min {p G [0,1] : Q m -< pR for some strategy R} . 

An analogous result holds for co- strategies. 

3.1 Interaction output probabilities 

This section is devoted to a proof of Theorem 13.11 (Interaction output probabilities). 
We preface the proof with a discussion of a super-operator called the contraction, 
whose useful properties will be employed in the proof that follows. 

The contraction operation 

Informally speaking, the contraction operation is defined so that a composition of 
operators 

B r A r B r —\ ■ ■ ■ B\A\ 
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is the image under the contraction of the tensor product 

B r ®---®B 1 ®A r ®---®A 1 . 

The ability to "unravel" operator compositions in this fashion is useful for our 
purpose because it allows us to isolate the actions of Alice (At, . . . , A r ) from those 
of Bob (Bi, . . . , B r ) in some r-round interaction. 

Still speaking informally, the existence of an operation such as the contraction 
follows from the fact that the composition BA is multilinear in the operators A, B. 
Of course, the tensor product A®B is also multilinear in these operators. Indeed, as 
noted in Section 11.2.11 the tensor product possesses a special universality property 
whereby any multilinear mapping on A, B could equivalently be expressed as a 
linear mapping on the tensor product A® B. In our case, that linear mapping is 
the contraction operation. 

Let us formally define this operation. 

Definition 3.4 (Contraction operation). The contraction operation in its full gen- 
erality is more easily defined as a linear functional on vectors. For any complex 
Euclidean space V we define 



contract : V <8> V — > C : u n- 



where {ei, . . . , edi m (v)} denotes the standard basis for V. 

Just as the trace function is tensored with the identity to yield the partial trace, 
the contraction is often tensored with the identity to yield the partial contraction 
over V: 

(dim(V) \ 
e* <g> I A <g> e* u. 

(The exact ordering of the three spaces in the above tensor product V <8> A <8> V is 
immaterial — the contraction is defined similarly for other orderings.) 

The partial contraction is often viewed as a super-operator as follows. If u = 
vec(X) for some operator X : V — > V <8> A then we may dispense with the vec(-) 
notation and simply write 

dim(V) 

contract [V] (X) = ^ (e*®I A )Xei. 
i=i 

Finally, we write contract [V, W] as shorthand for the composition contract [V] o 
contract [W]. □ 
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Two useful properties of the contraction operation — including the ability to 
"unravel" operator compositions — are noted in the following proposition. Each 
item in this proposition is proven by a straightforward but tedious exercise in 
"index gymnastics." 

Proposition 3.5. The following hold: 

1. For any operators A : X — > A <8> y and B : B ® y — > Z we have 

contract [3>] {A <g> B) = (B <g> I A ) (A ® I B ) . 
In particular, if A = B = C then contract [y] (A ® B) — BA. 

2. For any operators A : X — >■ y and B : y — > X we have 

contract^, y](A®B) = Tr(AB) = (A*,B). 

Proof. We begin with item[TJ Throughout the proof it might be helpful to remember 
that A £g> B and its contraction take the following forms: 

A®B : x®B®y ^A®y®z, 

contract [y] (A® B) : X ®B ^ A® Z. 

We denote the standard bases of A, B, X, y, and Z by 

{ax, . . . }cA, {x h ... } c X, 

{&i, . . .,6dim(B)} C B, {yx, . . . ,ydim(y)} C y, 

{Zl, ■ ■ ■ , Zdim(Z)} C Z. 

Then for some complex numbers a^fc, A,m,n G C we may write 

dim(y) dim(A') dim(A) 

A = a hO,k( a k ® 

i=l j=X fc=l 

dim(y) dim(23) dim(2) 

^ = ^ ^ ^ f3l,m, n Zn(b m ® yi)* ■ 
1=1 m=l n=l 

By the definitions of the contraction and of matrix multiplication, we obtain 
contract^] (A ® S) = ^ (-W ® y*) (A <g> 5) (i*^ <g> y ) 

o=l 

( dim(^) 



^ I ^2 a ,j,kl3o,m,n\ (a k ® z n )(xj ®b m y 

j,k,m,n \ 0=1 

(B® I A ) (A®I B ). 
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For item [21 we denote the standard bases of X and y by 

{xi, . . . , XdimfA')} C X, 

{yi, ■ ■ ■ ,Vdim(y)} c 

Then for some complex numbers ajj, /3/ jm G C we may write 

dim(A') dim(y) 

f=l j=l 
&im(X) dim(y) 

1=1 m=l 

By the definitions of the contraction, matrix multiplication, and the trace we obtain 

dim(A") dim(^) 

contract^, y] {A®B)= ^ ^ (y p ® x f (A® B) (x ® y p ) 

o=l p=l 
dim{X) dim(y) 

o=l p=l 

= Tr(AB) = (A*, B) 

as desired. □ 



Proof of Theorem 13.11 (Interaction output probabilities) 

We are now ready to provide the promised proof. The theorem is restated here for 
convenience. 

Theorem 13.11 (Interaction output probabilities). Let {Q a } be a measuring strategy 
and let {Rb} be a compatible measuring co-strategy. For each pair (a,b) of measure- 
ment outcomes, the probability with which the interaction between {Q a } and {Rb} 
yields (a,b) is given by the inner product (Q a ,Rb)- 

Proof. Suppose {Q a } is described by isometries A\, . . . , A r and a projective mea- 
surement {n a }. Similarly, suppose {Rb} is described by a pure state uq, isome- 
tries Bi,...,B r , and a projective measurement {A&}. For each pair (a, b) let 
v a ,b G Z r ® Wr denote the vector obtained by applying the measurement oper- 
ator Il a ® A& to the pure state of the entire system at the end of the interaction. 
That is, v a ,b is given by 

v a ,b = (n„ <g> A 6 ) B r A r B r -i ■ ■ ■ BiAiUq. 

(Our notation here suppresses the numerous tensors with identity.) Then the de- 
sired probability is equal to ||f a ,f,|| 2 - The remainder of this proof is dedicated to 
proving that 

\\v a ,b\\ = (Qa, Rb) ■ 
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We use the contraction operation to pull apart the composition of v a ^ and 
express it contraction of the tensor product 

(II a <g> Iy r ) A r <8> A r _ x g) • • • <8 A x <8 A 6 .B r ® B r _! ® • ■ ■ <g> B x <8 u 

over every space except Z T and W r . For convenience, this expression for i^j, is 
written 

v a ,b = contract [/fi, . . . , X r , y 1: . . . , >V] (A <8) -B) 
where the operators 

^4 : Afi...,. -> y^.r <g> z r , 
5 : yi...r ->■ ATi.„ r (8) W r 

are given by 

A = contract [^i, . . . , £ r _i] ((n„ ® Iy r ) A r ® A-i <8> • • • ® Ai) , 
5 = contract [W , . . . , W r -i] (A bJ B r <8> 5 r _i <8> • • • <8) -Bi <8) «o) ■ 

With an eye toward the end of the proof, we observe that 

Q a = Tr 2r (vec(A)vec(A)*), 

i2 6 = Tr Wr (vec(5*)vec(£*)*) 

as per Definition 12.41 (New formalism for non- measuring strategies). 

Let {ei, . . . , edim(2 r )} and {/i, . . . , /dim(w r )} denote the standard bases of Z r and 
W r , respectively, and for each i, j define the operators 

Aq) : X\,„ T — >■ yi... r , 

B(j) : yi... r — > X\...r 

by 

%) = (/; ® J 5- 

Again, with an eye toward the end of the proof we observe that 

dim(2 r ) 

vec vec = Tr^(vec(A) vec (A)*) = Q , 

i=l 
dim(W r ) 

^ vec (B* (j) ) vec = Tr Wr (vec(IT) vec(iT)*) = R b . 

The (i, j)th component of v a j> (in the standard basis) is given by 

(e* <8> //) v atb = contract^, . . . , X r , y t , . . . , y r ) (A {i) <g> B {j) ) = (B* (j) , A {i) ) . 
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Employing the cyclic property of the trace, we find that the modulus squared of 
the (i,j)th component of v a j, is 

(B* {j) ,A (l) ) (A {l) ,B* U) ) = (vec (A (i) ) vec (A w )*,vec (B* {j) ) vec (Bfa)*) . 

Then the desired norm ||v a ,fe|| 2 is the sum of these moduli squared: 

\\va,b\\ 2 = ( vec (Ao) vec ( A (vY > vec ( B h) vec ( B hY) 

/dim(2 r ) dim(W r ) 

= ( vec(A (i) )vec(A (i) )*, ^ vec ( S (i)) vec ( B U)Y 

\ i=i j=i 

= (Qa, Rb) ■ 

□ 

3.2 Characterization of strategies 

This section is devoted to a proof of Theorem 13.21 (Characterization of strategies). 
Before providing the proof, it is appropriate to comment on the relationship be- 
tween our characterization of strategies and prior work on so-called "no-signaling" 
quantum operations. 

Relationship between strategies and no-signaling operations 

The content of Theorem 13.21 was originally established in 2002 within the context 
of no-signaling operations via the combined work of Beckman et al. [B GNPOl] 
and Eggeling, Schlingemann, and Werner [ESW02J. The proof presented in this 
thesis was developed by the present author and Watrous in 2007 |GW07] within 
the context of quantum strategies and without any knowledge of this prior work. 

Let us elaborate upon the connection between strategies and no-signaling oper- 
ations. Simply put, Theorem 13.21 states that Q is an r-round strategy if and only 
if it obeys the partial trace condition 

Tr yr (Q) = R ® I Xr 

for some (r — l)-round strategy R. This partial trace condition also appears in 
Beckman et al. [ BGNPOll Theorem 8], wherein it was established that the above 
condition also captures the one-directional no-signaling property of certain quan- 
tum operations. 

For quantum strategies, this property means that it is impossible to send in- 
formation (a "signal") from the system Xi to any of the systems 3^i, • • • ,3^-i for 
each i. Intuitively, we should expect quantum strategies to obey a no-signaling 
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condition of this sort. Any "strategy" that disobeys this condition could be used 
to communicate backwards in time — from future rounds of interaction to previous 
rounds. A world that permitted such clairvoyant strategies would be an interesting 
world indeed! Alas, such a world is not causally consistent. 

While Beckman et al. showed that the partial trace condition of Theorem 13.21 is 
a necessary condition for quantum strategies, it was Eggeling, Schlingemann, and 
Werner who established that this condition is also sufficient. In particular, they 
showed that any quantum operation that forbids signaling in one direction may be 
implemented by two separate quantum operations, possibly with communication in 
the other direction. 

For quantum strategies, signaling is forbidden in the future-past direction, but 
permitted in the past-future direction. In this context, such past-future commu- 
nication is better known as "memory" and the two separate quantum operations 
can be taken to represent the actions of the strategy in two distinct rounds of the 
interaction. In this way, a quantum strategy is constructed from an operation that 
obeys the one-directional no-signaling operation, just as in Theorem 13.21 

Proof of Theorem 13.21 (Characterization of strategies) 

Let us present the promised proof. The theorem is restated here for convenience. 

Theorem 13.21 (Characterization of strategies). Let Q G H + (3^i... r ® X\...r) be an 
arbitrary positive semide finite operator. The following hold: 

1. Q is an r -round strategy if and only if there exists an (r — l)-round strategy 
R with the property that Try r (Q) = R®Ix r - Moreover, R is obtained from Q 
by terminating that strategy after r — 1 rounds. 

2. Q is an r-round co-strategy if and only if there exists an operator R for which 
Q = R® Iy r and Tr^ r (i?) is an (r — 1) -round co-strategy. Moreover, Tr Xr (R) 
is obtained from Q by terminating that co-strategy after r — 1 rounds. 

3. Every r-round strategy or co-strategy Q may be described by isometries in 
such a way that the final memory space has dimension equal to rank(Q). 

Proof. We begin with a proof of item [TJ Along the way, we will also prove item [31 
Item [2] follows from item [TJ — a fact we establish at the end of this proof. 

Suppose first that Q is an r-round strategy and let R denote the (r — l)-round 
strategy obtained from Q by terminating that strategy after the first r — 1 rounds. 
We will prove that Try r (Q) = R®I Xr - 

Toward that end, let E r , H r _i be the quantum operations satisfying Q = J(E r ) 
and R = J(H r _i). As illustrated in Figure I3TTI is clear that the super-operators 
(Try r o E r ) and (H r _i <g> Tr^J are equal. We have 

Try r (Q) = Tty r (J(E r )) = J(Tty r O Er) = J(S P _! <8> Tr^) = R®I Xr 
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traced out 
traced out 



Try 3 (H3(S)) 
= E 2 (Tr A r 3 (£)) 



Figure 3.1: For a three- round strategy, the super-operators {Tiy 3 o H 3 ) and 
(H 2 <S> Tr^ 3 ) are equal. 



as desired. 

Next, assume that Q satisfies Tiy r (Q) = R®Ix r for some (r — l)-round strategy 
R. We will prove that Q is an r-round strategy. Along the way, we will also establish 
item El in the statement of the theorem. 

This portion of the proof is by induction on the number of rounds r. We begin 
with the base case r = 1. It is clear that Q is a one- round strategy if and only if 
Q = for some quantum operation $i : L(Ai) — > L(3^i). As $i is a quantum 

operation, it must be the case that Tiy 1 (Q) = lx x - By convention, the zero-round 
strategy R that we seek must be represented by the scalar 1. The desired expression 
Tr yi (Q) — R <g) I Xl follows from the simple observation that I Xl = 1 <8> Ix\ ■ Item 
[3] for this case follows from the usual Stinespring representation: there exists a 
space Z\ with dim(^i) = rank(Q) and an isometry A\ : X\ — > y± <g> Z\ such that 
$! :X^Ty Zi {A x XA\). 

For the case r > 2, let Ai,...,A r -i be isometries that describe R and let 
A = A r _i ■ ■ ■ A\ denote the (r — l)-fold composition of these isometries, so that 

R = Tr Zr _ 1 (vec(A)vec(A)*). 

By the induction hypothesis, the memory space Z r _i has dim(2 r _!) = rank(i?). 
As required for item [3J we let Z r be a complex Euclidean space with dimension 
equal to rank(Q). Let B : X\ _ r — > 3^i...r ® Z r be any operator satisfying 

Tr^(vec(B)vec(B)*) = Q. 

Such a choice of B must exist given that the dimension of Z r is large enough to 
admit a purification of Q. Note that vec(B) is also a purification of £g> J^- r : 

Tr^^vec^) vec(B)*) = Tr^Q) = R ® J^. 

We will now identify a second purification of i? £g> • Toward that end, let V be 
a complex Euclidean space with dim(V) = dim(X r ) and let V : X r — > V be an 
arbitrary unitary operator. Then 

Tr v (vecGOvec(tO*)=/^ 
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and so 

Tr Zr _^ v {yec{A <g> V) vec(A <g) 1/)*) = R®I Xr . 
We will now use the isometric equivalence of purifications to define an isometry 

A r : X r <g) -2y_l — ?• 3^r <8> 

for the rth round that will complete the proof. Because Z r -\ ® V has the minimal 
dimension required to admit a purification of R ® Ix r , it follows that there exists 
an isometry U : Z r _i ®V — >■ y r <g> Z r such that 

(bi...r-i ® U ® J *i..J vec (^ ® V) = vec(£). 
This expression may equivalently be written 

a = (/»...„_, ® e/) (A®n 

We now define A r = U(Iz r _ 1 <8> V") so that 

5 = (/*...,._! ® A r ){A® I Xr ). 

In other words, B is given by the r-fold composition A r ■ ■ ■ A\. As 

Q = Tr Zr {vec{B)vec{B)*), 

it follows that Q is an r- round strategy described by the isometries Ax, . . . , A r . The 
proofs of items [1] and [3] are thus complete. 

Let us now prove item [2j Essentially, the proof consists of several applications 
of item [T] with different choices of input and output spaces. 

As noted in Definition 12.61 (New formalism for co-strategies), each r- round co- 
strategy may be viewed as an (r + l)-round strategy with input spaces C, y±, . . . , y r 
and output spaces X%, . . . , X r , C and vice versa. With this fact in mind, item [1] tells 
us 

Q is an (r + l)-round strategy 

for input spaces C, 3^i, • • • , y r an d output spaces Xi, . . . , X r , C 
•<=>- Tr c (Q) = R® Iy r where R is an r-round strategy 

for the input spaces C, 3^i, • • • , y r -i an d output spaces Xi, . . . , X r . 

(Of course, Tr c (X) = X for every X.) To complete the proof, it suffices to show 
that 

R is an r-round strategy 

for input spaces C, 3^i, • • • , y r -i an d output spaces X\, . . . , X r 
-<=>- Tr^(i?) is an r-round strategy 

for input spaces C, 3^i, • • • , X--i an d output spaces X ly . . . , X r _i, C. 
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For once this equivalence is shown, item [2] follows from the fact that the linear 
conditions in question are robust with respect to taking adjoints. In particular, it 
holds that 

Tr x (J(E)) = J(A)®I y <{=}► Tr*(J(~*)) = J(A*) ® I y 

for all super-operators S, A and all appropriate choices of spaces X,y. 

It remains only to establish the stated equivalence between R and Tr^ r (i?). 
Toward that end, suppose first that R is an r-round strategy for the input spaces 
C, 3^i, . . . , y r -i and output spaces Xx, . . . , X r . By item [1] it follows that 

Tr Xr (R) = S ® Iy^ 

where S is an (r — l)-round strategy for the input spaces C, y%, . . . , y r -2 and output 
spaces Xx, . . . , X r ^x- It is not hard to see that S <8> Iy r _ 1 denotes a valid r-round 
strategy for the input spaces C, 3-\, • • • , y r -i and output spaces Xx, . . . , X r _x, C. 
Hence, Trx r {R) is as claimed. 

Conversely, suppose that Trx r {R) is an r-round strategy for the input spaces 
C, 3^i, • • • , y r -i and output spaces Xx, . . . , X r _x, C By item [1] it follows that 

Tr c (Tr Xr (R)) = S®Iy r _ l 

where S is an (r — l)-round strategy for the input spaces C, y ly ■ ■ ■ , 3r-2 and output 
spaces Xx, . . . , X r _x- By item [1] again, it must be that R is an r-round strategy for 
the input spaces C, • • • , 3r-i and output spaces Xx, . . . , X r as desired. □ 

3.3 Maximum output probabilities 

This section is devoted to a proof of Theorem 13.31 (Maximum output probability). 
We offer two distinct proofs of this theorem. The first is provided in Section 13.3.11 
and employs the formalism of convex polarity, while the second is provided in 
Section P3. 3. 21 and employs the formalism of semidefinite optimization duality. Both 
proofs make use of the fact that the sets of strategies and co-strategies are compact 
and convex — an immediate implication of Theorem 13.21 that was noted at the start 
of this chapter and shall be proven at the end of this chapter. 

The theorem is restated here for convenience and is followed by a simple lemma 
employed in both our proofs. 

Theorem 13.31 (Maximum output probability). Let {Q m } be a measuring strategy. 
For each outcome m, the maximum probability with which {Q m } can be forced to 
output m by a compatible co-strategy is given by 

min {p G [0,1] : Q m ^ pR for some strategy R} . 

An analogous result holds for co- strategies. 
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Lemma 3.6. Suppose that Theorem \3.3\ is known to hold for strategies. Then 
Theorem \3.3\ also holds for co- strategies. The converse is also true. 



Proof. Suppose that Theorem 13.31 is known to hold for strategies. Let {Rb} be 
an r- round measuring co-strategy for input spaces X\,...,X r and output spaces 
3^i, . . . , y r - For each outcome b let E b : L(y 1 r ) — > L(X 1 r ) be the super-operator 
with R b = J(H£). Then {J(E b )} denotes an (r + l)-round measuring strategy for 
input spaces C, 3^i, • • • , y r and output spaces X % , . . . , X r , C. As such, it holds that 

max{(J(2 6 ), </($)) : J(<&) is a compatible co-strategy} 
= min{p G [0, 1] : J(E b ) ^ pj(^/) for some strategy J(^)} ■ 

The result follows from the fact that (J(E b ), J($)) = (J(SJ), J($*)) and 

J(E b )± P J(V) <^> J(SJ)r<pJ(**) 

for all choices of super-operators E b , $, and ty. The proof of the converse statement 
is identical. □ 



3.3.1 Proof by convex polarity 

Our first proof of Theorem 13.31 (Maximum output probability) employs a notion 
from convex analysis known as "polarity." But before we discuss this notion in 
detail, let us first introduce some notation. We let 

S r c I TOY.,- .V...,) 

denote the set of all r-round non-measuring strategies for input spaces Xi, . . . , X r 
and output spaces y%, . . . ,y r . Similarly, we let 

CO-S r C \ \ i J|...r .1';..,.) 

denote the set of all r-round non-measuring co-strategies for these input and output 
spaces. In keeping with our convention, we have So = co-So = {1}. We mentioned 
earlier that the sets S r and co-S r are compact and convex. 

For any set C of positive semidefinite operators, we write 

;C = {X : ■< X < Y for some Y 6 C} . 

A key component of this proof of Theorem 13.31 is a characterization of the polar 
sets of \S r and J,co-S r . 
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Introduction to polarity 

For any non-empty set C of Hermitian operators, the polar C° of C is defined as 

C° = {A : (B, A) < 1 for all B G C} 

and the support and gauge functions for C are defined as 

s(X | C) = sup{(X,F) : Y G C} 
g{X | C) = inf {A > : X G AC} . 

Let us list some basic facts concerning these objects. 

Proposition 3.7. Let C, D be non-empty sets of Hermitian operators. The follow- 
ing hold: 

1. //CCD then D° C C°. 

2. If —X G C for each positive semidefinite operator X then every element of 
C° is positive semidefinite. 

3. If C is closed, convex, and contains the origin then the same is true of C° . 
In this case we have C°° = C and s(- | C) = g{- | C°). 

The first two items of Proposition 13.71 are elementary; a proof of the third may 
be found in Rockafellar |Roc70] . 

A characterization of polar sets of strategies 

We now establish a useful characterization of polar sets derived from strategies and 
co-strategies. 

Proposition 3.8 (Polar sets of strategies). The following polarity relations hold 
for the sets \S r and J,co-S r : 

(|S r ) = {X : X -< Q for some Q G co-S r } , 
(4,co-S r )° = {X : X -< Q for some Q G S r } . 

We begin with a simple observation implying that the two equalities in Propo- 
sition are equivalent. 

Lemma 3.9. Let A,B be non-empty, closed, and convex sets of positive semidefi- 
nite operators, and suppose 

(|A)° = {X : X ±Q for some QgB}. 

Then 

(|B)° = {Y :Y <R for some R G A} . 
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Proof. Let 

C = {Y : Y ^ R for some R G A} . 

The lemma is proved by showing C° = \B, from which the desired result C = (J3)° 
immediately follows. Let us start by proving C° C \B. As —P G C for every 
positive semidefinite P, it follows that every element of the polar C° is positive 
semidefinite. Clearly C C, and therefore C° C (4A)°. By definition, J,B 
consists of the positive semidefinite elements of (LA)°, so we have C° C J,B. 

On the other hand, we have that every Q G \B is contained in (LA)°, implying 
that (Q, R) < 1 for all R G A. As Q is positive semidefinite, this also implies that 
(Q, X) < 1 for all X < R. Consequently, Q G C°. Thus = C° as desired. □ 

We also require a technical statement that simplifies computations involving 
\S r and J,co-S r . 

Lemma 3.10. Let D C H(V) be any closed, convex set that contains the origin 
and let C C H(V ® W) be given by 

C = {X : X ±Y <g) Jyy for some Y G D} . 

Then C is also a closed, convex set that contains the origin and 

C° = {Q : Q h and Tr w (Q) G D°} . 

Proof. That C is closed, convex, and contains the origin follows immediately from 
its definition. Let us compute C°. The assumption G D implies that — R G C 
for every positive semidefinite R, and hence every element of the polar C° must be 
positive semidefinite. If it is the case that Q G C° then for all Y G D we have 

l>(Q,Y®I w ) = (Trw(Q),Y) 

and so Trw(Q) G D° as desired. 

On the other hand, if Tr>v(Q) G D° then 

l>(Tr w (Q),Y) = (Q,Y®I w ) 

for all Y G D. If in addition Q is positive semidefinite then it also holds that 
(Q, X) < 1 for all X ^ Y <8> I w and therefore Q G C°. □ 

We are now ready to prove the desired characterization of polar sets of strategies. 

Proof of Proposition \3.8i (Polar sets of strategies). The proof is by induction on the 
number of rounds r. For the base case r = 0, we have J,S = |co-S = [0, 1] and 
(iSo)° = (|co-S )° = (— oo, 1] and so the lemma holds when r = 0. 
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For the general case, we note that the two items in the statement of the propo- 
sition are equivalent by Lemma [3 .9[ so it suffices to prove only the first. Let 

A = {X : X y and Try r (X) E B} , 

B = {Y : Y ^ R <g) I Xr for some R E |S r _i} . 

Then by Theorem 13.21 (Characterization of strategies) we have 

— — .A.. 

We apply Lemma [3.101 twice — once with (C°,D°,VV) = (A, ~B,y r ) and once with 
(C, D, W) = (B, |S r _i, X r )— to obtain 

(|S r )° = A° = {X : X r< Q <8> Iy r for some Q E B°} , 
B° = {Y : Y h and Tr^ r (F) G (|S r _i) } . 

By the induction hypothesis we have 

(|S r _i)° = {X : X r< Q for some Q G co-S r _i} . 

Substituting this expression into the above expression for (|S r )° we find that the 
proposition follows from Theorem 13.21 (Characterization of strategies). □ 

First proof of Theorem 13.31 (Maximum output probability) 

First proof of Theorem Iff. 31 We prove the theorem for strategies — the result for co- 
strategies then follows from Lemma 13.61 Let p denote the maximum probability 
with which {Q m } can be forced to output m in an interaction with some compatible 
co-strategy. It follows from Theorem 13.11 (Interaction output probabilities) that 
p = s(Q m | co-S r ). Using Proposition 13.81 (Polar sets of strategies), along with the 
fact that Q m is positive semidefinite, we have 

s{Q m | co-S r ) = s(Q m \ |co-S r ) = g(Q m | (|co-S r )°) = g(Q m \ |S r ), 

which completes the proof. □ 

3.3.2 Proof by semidefinite optimization duality 

Our second proof of Theorem 13.31 (Maximum output probability) employs the pow- 
erful machinery of semidefinite optimization duality. The idea is to construct a 
semidefinite optimization problem that captures the maximum output probability, 
compute its dual problem, and then show that the primal and dual problems satisfy 
the conditions for so-called "strong" duality. 
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Overview of semidefinite optimization 



The semidefinite optimization problems we consider are expressed in super- operator 
form. While the super-operator form differs superficially from the more conven- 
tional standard form for these problems, the two forms can be shown to be equiv- 
alent and the super-operator form is more convenient for our purpose. Watrous 
provides a helpful overview of this form of semidefinite optimization |Wat09j . For 
completeness, that overview is reproduced here. 

Let X, y be complex Euclidean spaces. A semidefinite optimization problem 
for these spaces is specified by a triple ($, A, B) where $ : L(A') — > L(y) is a 
Hermitian-preserving super-operator and A G H(X) and B G H(3^). This triple 
specifies two optimization problems: 



An operator X obeying the constraints of the primal problem is said to be primal 
feasible, while an operator Y obeying the constraints of the dual problem is called 
dual feasible. The functions X t— > (A, X) and Y h-> (B, Y) are called the primal 
and dual objective functions, respectively. We let 



denote the optimal values of the primal and dual problems. (If there are no primal 
or dual feasible operators then we adopt the convention a = — oo and (3 = oo, 
respectively.) It is not always the case that the optimal value is actually attained 
by a feasible operator for these problems. 

Semidefinite optimization problems derive great utility from the notions of weak 
and strong duality. Essentially, weak duality asserts that a < (3 for all triples 
(§,A,B), whereas strong duality provides conditions on (Q,A,B) under which 
a = (3. Two such conditions are stated explicitly as follows. 

Fact 3.11 (Strong duality conditions). Let ($, A, B) be a semidefinite optimization 
problem. The following hold: 

1. (Strict primal feasibility.) Suppose (3 is finite and there exists a primal feasible 
operator X such that X is positive definite and $(A) -< B. Then a = (3 and 
(3 is achieved by some dual feasible operator. 

2. (Strict dual feasibility.) Suppose a is finite and there exists a dual feasible 
operator Y such that Y is positive definite and &*(Y) y A. Then a = (3 and 
a is achieved by some primal feasible operator. 



Primal problem 



Dual problem 



maximize (A, X) 
subject to $(A) H B 
X G H + (X) 



minimize (B, Y) 
subject to $*(y) y A 

Y G n + {y) 



a = sup {{A, X) : X is primal feasible} 
(3 = inf {(B, Y) : Y is dual feasible} 
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A semidefinite optimization problem for maximum output probabilities 



We now construct a triple (<&, A, B) whose primal problem captures the maximum 
probability with which a given measuring co-strategy {Rb} can be forced to output 
a given outcome b by some compatible strategy The dual problem will capture the 
minimization stated in Theorem 13.31 Equality between these two values will follow 
when we establish strong duality for ($, A, B). 

It is convenient to express the components of our triple (<&, A, B) in block form. 
The operators A, B are given by 



/ 



.4 



\ 







(I 



B 



\ R b J 

and the super-operator $ is given by 



0\ 



$ : 



( S X 



\ 



\ 



S r 



/Tr^; 



V 



Tly 2 (S 2 )-S 1 ®I X2 



Try r (S r 



To be clear, $ depends only upon the diagonal blocks Si, . 



\ 



- S r _i ® / 

S r of the input matrix. 



Correctness of the primal problem 

Let us verify that the primal problem expresses the desired maximum output prob- 
ability for the measurement outcome b. For any operator S with diagonal blocks 
Si, . . . , S r , the primal objective value at S is given by (A, S) = (Rb, S r ). Hence, 
the desired quantity is precisely the supremum of (A, S) over all S for which S r is 
a strategy. It remains only to verify that the constraint $>(S) ^ B enforces this 
property of S r . The following lemma serves that purpose. 

Lemma 3.12 (Correctness of the primal problem). For every primal feasible solu- 
tion S there exists another primal feasible solution S' whose objective value meets 
or exceeds that of S and whose diagonal blocks S[, . . . , S' r have the property that 
is an %-round non-measuring strategy for each % = 1, . . . , r. 

Proof. Let Si, . . . , S r denote the diagonal blocks of S. As S is primal feasible, we 
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know that 



Try 2 (S 2 )±S 1 ®I X2 

It is clear that there is a S[ >z Si such that Try^S^) = I Xl . Similarly, for each 
% — 2, . . . , r there is a S' { >z Si such that Tiy.(Sl) = S' i _ 1 ®I Xi . The desired operator 
5" is then obtained from S by replacing its diagonal blocks with S[, . . . , S' r . That 
(A, S') > (A, S) follows from the fact that A^O and 5" y S. That S[, . . . , S' r are 
non-measuring strategies follows from Theorem l3.2l (Characterization of strategies). 

□ 



Correctness of the dual problem 

Before we can show correctness of the dual problem, we must compute the adjoint 
super-operator $*. Let us verify that $* = $ where \I/ is given by 



: 



\ 



\ 



Tr 



( 7\® I yi -Tr X2 (T 2 



i — y 



\ 



T r _! g> J 3V _ 1 - Tr;t r (T r 



V 



o 



Let S,T be any operators in the domains of <3>, respectively, and let Si 
and Tx, . . . ,T r denote the diagonal blocks of S and T, respectively, so that 

r 

<$(£), T> = (Tr yi (S' 1 ),T 1 } + £ (Tr^) - SU ® J^T,) 

i=2 
r 

= (S h T 1 <g>Iy 1 ) + ^2 (S i} Ti <g> - (S^-i, Tr^(Ti)) 

1=2 
r-1 

= (5 n T r ® Iy p ) + ^ Tj ® - (£ f , Tr^ +1 (T m )) 



, . . . , w r 



i=i 

r-1 



(£V, T r ®I yr ) + J2 (Si, % ® I Vi - Tr* i+1 (T i+1 ) 
(S, *(T)) . 



i=i 



(St" 



As this equality holds for all S, T, it follows from the definition of the adjoint that 
$* = \l> as claimed. 
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We now prove a lemma that establishes the link between the dual problem and 
the minimization condition of Theorem 13.31 (Maximum output probability) . 

Lemma 3.13 (Correctness of the dual problem). For every dual feasible solution 
T there exists another dual feasible solution T' whose objective value p equals that 
ofT and whose diagonal blocks T{, . . . , T' r have the property that T[ £g> Iy i is a non- 
measuring co-strategy multiplied by p for each i — 1, . . . , r. 

Proof. Let T 1; . . . ,T r denote the diagonal blocks of T. As T is feasible, we know 
that 

Tx®I yi hTr X2 (T 2 ) 
T r <g> Iy r >z R b 

The objective value for T is then given by p = (B, T) = Tr(7\). If p = then it 
must hold that T\ = ■ ■ ■ = T r = 0, so the lemma holds trivially in this case. For 
the remainder of the proof we shall assume p > 0. 

It is clear that there is a T' 2 y T% such that T\ (8> Iy x = Tr^ 2 (T2). Similarly, 
for each i = 3, . . . ,r there is a T[ y Ti such that T[_ x <8> Iy i _ 1 = Tr^(T/). As 
Tr y T r , it must also be the case that T' T ® Iy T y R^. The desired operator T' 
is then obtained from T by replacing its diagonal blocks with Ti, T%, . . . , T' r . That 
(B,T') = (B,T) follows from the equality (B,T') = Tr(T x ) = p. Finally, it follows 
from Theorem 13.21 (Characterization of strategies) that each ^T/ <S> ly t is a non- 
measuring co-strategy. □ 

As any feasible solution T has $*(T) y A, it must be that the rth diagonal 
block T r of T has the property that T r £3 Iy r y Rb- By Lemma 13.131 we may also 
assume that T r ® Iy T is a scalar multiple of a co-strategy. It is clear then that the 
optimal value of the dual problem equals the infimum over all such scalar multiples, 
subject to T r eg) Iy r y Rb, as required by Theorem 13.31 

Strong duality of the semidefmite optimization problem 

We already argued that the two quantities appearing in Theorem 13.31 are captured 
by the primal and dual semidefmite optimization problems associated with the 
triple (<&,A,B). To prove Theorem 13.31 it remains only to show that these two 
quantities are equal. This equality is established by showing that ($, A, B) satisfies 
the conditions for strong duality. 

Lemma 3.14 (Strong duality of ($, A, B)). There exists a primal feasible operator 
S and a dual feasible operator T such that (A, S) = (B,T). 
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Proof. We prove strong duality via item [T] of Fact 13.111 (Strong duality conditions). 
That is, we show that (3 is finite and the primal problem is strictly feasible. Then 
by Fact 13.111 it follows that a — and that (3 is achieved for some dual feasible 
operator. We complete the proof by noting that the optimal value a is also achieved 
by a primal feasible operator. 

First, let us argue that is finite. As B y 0, any dual feasible solution has 
nonnegative objective value. Thus, to show that is finite it suffices to exhibit a 
single dual feasible solution. Toward that end, let R be a non-measuring co-strategy 
with Ry Rb- Let T r be such that T r £g> Iy r = R and for each i — r — 1, . . . , 1 choose 
Tj so that Ti <S> ly i = Tr^ i+1 (T i+ i). (That each of T\,...,T r exists follows from 
Theorem 13.21 (Characterization of strategies).) Finally, let T be the block-diagonal 
operator whose diagonal blocks are T 1; . . . , T r . It is clear that T is dual feasible. 

Next, we show that the primal is strictly feasible. Choose 5 G (0, 1/r) and let 
S be the block-diagonal operator whose ith diagonal block Si is given by 

_ 1 -id 
dim(y 1 ... i ) 

It is clear that S y and it is tedious but straightforward to verify that $(5) y B. 
In particular, we have 



Tr yi (S 1 ) = (l-5)I Xl -< I. 



1-rd \-{r-l)8 

Try r (SV) = — — — r-fyi...r-i®*i...r -< -T. — TT] ^hi...r-l®X x ... r = S'r-l ®Ix T 

cnm{y 1 ... r -x) dim(3/ L .. r _i) 

It now follows from item [1] of Fact 13.111 that a = f3 and that /3 is achieved by some 
dual feasible operator. 

It remains only to show that a is also achieved by some primal feasible operator. 
By Lemma 13.121 it suffices to consider only those primal feasible S whose diagonal 
blocks are strategies. As the set of strategies is compact (Proposition 13. 15j) . it 
follows that the optimal a is finite and is achieved by a primal feasible solution. □ 



Second proof of Theorem 13.31 (Maximum output probability) 

Second proof of Theorem \3.3[ We prove the theorem for co-strategies — the result 
for strategies then follows from Lemma 13.61 Let p m 6 [0, 1] denote the maximum 
probability with which {Q m } can be forced to output m in an interaction with some 
compatible strategy. By Lemma 13.12} the optimal value of the primal problem 
associated with ($, A, B) equals p m . By Lemma 13. 13[ the optimal value of the dual 
problem associated with ($, A, B) equals the minimum p such that Q m ^ pR for 
some non-measuring co-strategy R. That these two values are equal follows from 
Lemma 13.141 □ 
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3.4 Other properties of strategies 



We conclude this chapter with three simple applications of the properties of strate- 
gies established in Theorems 13.11 and 13.21 In particular, we point out that Theorem 
13. 21 immediately implies that the set of all strategies is compact and convex. We also 
show that representations of strategies are unique and that they satisfy a convenient 
distributive property. The results in this section are proven only for strategies, but 
it is trivial to repeat each proof for co-strategies. 

The set of strategies is compact and convex 

Proposition 3.15 (Convexity of strategies). The set of all r-round strategies is 
compact and convex, as is the set of all r-round co- strategies. 

Proof. That the set of strategies is bounded follows from Proposition 11.31 and the 
fact that every strategy is the Choi-Jamiolkowski representation of some quantum 
operation. 

That the set of strategies is closed and convex follows from Theorem 13.21 which 
characterizes this set as an intersection between two closed and convex sets — the 
positive semidefinite operators and those operators satisfying the linear constraints 
appearing in the theorem. □ 

Equivalence and uniqueness of strategies 

In Section \2. 1.21 we noted that operational descriptions of strategies are not unique 
in the sense that two distinct descriptions could specify equivalent strategies. For 
the new representation of strategies, this is not so. 

Proposition 3.16 (Uniqueness of strategies). Two strategies Q,Q' may be dis- 
tinguished with nonzero bias by a compatible measuring co-strategy if and only if 
Q ^ Q' . A similar statement holds for co- strategies. 

Proof. Let {Rb} be any measuring co-strategy. By Theorem 13.11 the probability 
with which {Rb} outputs a given outcome b after an interaction with Q or with 
Q' is given by (Rb,Q) or (R b ,Q'), respectively. If Q — Q' then it holds that 
(X, Q) = (X, Q') for every operator X and so {Rb} cannot distinguish Q from Q' 
with nonzero bias. 

Conversely, if Q ^ Q' then for each spanning set B of operators there must exist 
some B e B with (B, Q) ^ (B, Q'). We claim that the set 

{Rb : Rb is an element of some measuring co-strategy} 

is a spanning set, from which the proposition follows. 
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One way to verify this claim is to note that the identity operator I (suitably 
normalized) denotes a valid non-measuring co-strategy It follows from Proposition 
12.71 that for each positive semidefmite operator R^< I (again, suitably normalized) 
there exists a measuring co-strategy of which R is an element. The claim then 
follows from the fact that the set of all operators -< R -< I is a spanning set. □ 



Distributive property for probabilistic combinations of strategies 

In Example 12.31 it was shown that the operational description of strategies lacks a 
convenient distributive property for probabilistic combinations of strategies. This 
problem is rectified under the new representation for strategies. 

Proposition 3.17 (Distributive property for strategies). Let Q,Q' be strategies 
and let p G [0,1]. The strategy that plays according to Q with probability p and 
according to Q' otherwise is given by the convex combination pQ + (1 — p)Q' . A 
similar statement holds for co-strategies. 



Proof. Let Q" denote the probabilistic combination of Q and Q' described in the 
statement of the proposition. For any measuring co-strategy {Rb} and any outcome 
b we let r b denote the probability with which the interaction between Q and {Rb} 
yields the outcome b. We also define r' b and r' b ' similarly in terms of Q' and Q", 
respectively. By definition, r' h ' = pr b + (1 — p)r' b . 

By Theorem 13. II and the linearity of the inner product, we have 

(Q", R b ) = r'l = pr b + (l -p)r' b = p (Q, R b ) + (1 -p) (Q', R b ) = (pQ + (1 - p)Q', R h ) 

from which it follows that {Rb} cannot distinguish Q" from pQ + (1 — p)Q' with 
nonzero bias. That these two operators are equal then follows from Proposition 

km □ 
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Chapter 4 
Applications 



In this chapter we present several applications of the formalism for quantum strate- 
gies developed in Chapter [3j 

• In Section fl~Tl we develop a general formalism for zero-sum quantum games. A 
quantum analogue of von Neumann's Min-Max Theorem for two-player zero- 
sum games is established, and an efficient algorithm to compute the value of 
a zero-sum quantum game is presented. 

• Section 14.21 contains complexity theoretic applications of quantum strategies, 
including the collapse of the complexity classes QRG and EXP and parallel 
repetition results for single-prover quantum interactive proofs and for quan- 
tum interactive proofs with two competing provers. 

• In Section 14.31 we provide a simplified proof of Kitaev's bound for strong 
quantum coin-flipping. 

With the exception of the parallel repetition results, each of these applications first 
appeared in Ref. |GW07] . The parallel repetition result for single-prover quantum 
interactive proofs is due to Watrous and was not published prior to the present 
thesis. 



4.1 Theory of zero-sum quantum games 

In this section we develop a general formalism for zero-sum quantum games. Specif- 
ically, we prove a quantum analogue of von Neumann's Min-Max Theorem for two- 
player zero-sum games in Section 14.1.11 and we provide an efficient algorithm to 
compute the value of such a game in Section 14.1.21 
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4.1.1 Min-max theorem for zero-sum quantum games 

This section begins with a brief introduction to games and min-max theorems, 
after which we provide our formalism for quantum games and the quantum min- 
max theorem. 

While it is natural to expect a min-max theorem to hold for two-player zero-sum 
quantum games, the absence of a mathematically convenient formalism for these 
games has precluded the appearance of such a theorem in the literature. (Lee and 
Johnson established a min-max theorem for the special case of one-round quantum 
games, wherein only a single round of messages is exchanged between the players 
and a referee [LJ03J .) 

Two-player games and min-max theorems 

A game consists of a interaction between two or more players, followed by a payout 
that is awarded to each player at the end of the interaction. It is the goal of each 
player to maximize his or her own payout. A two-player game is zero-sum if the sum 
of the payouts awarded to the players is always zero. Two-player zero-sum games 
are always competitive, as the players never have incentive to co-operate. Many 
popular examples of games fall into this category, including Poker, Checkers, and 
Go. (Win-lose games such as Checkers and Go can be represented as a zero-sum 
game wherein the only possible payouts are ±1.) 

Let us call the two players in a zero-sum game Alice and Bob. In the context 
of these games, a min-max theorem is an assertion that every game has a value v 
with the following properties: 

(i) There exists a strategy for Alice that ensures a payout of at least v regardless 
of Bob's strategy. 

(ii) There exists a strategy for Bob that ensures a payout of at most v to Alice 
regardless of her strategy. 

In other words, there always exist strategies for the players that are optimal in the 
sense that the players never have incentive to deviate from their optimal strategies. 
The original Min-Max Theorem for classical games was established by von Neumann 
in 1928 jvN28] . 

In an analytical context, min-max theorems are statements about sets A, B and 
functions / : A X B — > R. While it must always hold that 

sup inf f(a } b) < inf sup /(a, b) , 

a&A b€B agj4 

a min-max theorem provides conditions upon A, B, f under which these two quan- 
tities are equal. For example, the following well-known min-max theorem will prove 
useful for our purpose. 
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Fact 4.1 (Convex-bilinear min-max theorem). If A,B are compact convex subsets 
of finite- dimensional real vector spaces and f : A x B — )■ K is bilinear then 

maxmin f(a,b) = minmax f(a,b). 

aeA befi fees aeA V ' 

While Fact 14.11 does not follow immediately from von Neumann's original Min- 
Max Theorem, it does follow from an early generalization due to Ville |Vil38] . 
Additional citations and an English-language proof can be found in Rockafellar 
|Roc70j . 

Analytical min-max theorems such as Fact 14.11 can be used to establish a min- 
max theorem for a given game or class of games. To do so, it suffices that A, B 
represent the sets of all possible strategies for Alice and Bob and that f(a, b) denotes 
the payout to Alice when she employs strategy a and Bob employs strategy b. 

Formal definition of a zero-sum quantum game 

Classical two-player games have several distinct mathematical formalizations, each 
with its own advantages. One of these formalisms — the refereed game — lends itself 
particularly well to generalization to quantum games. This formalism encapsulates 
the rules of a particular game into a referee, who exchanges messages with each of 
the two players. The referee enforces the rules of the game and decides when to 
terminate the interaction and award a payout to the players. In a quantum refereed 
game the players and referee may exchange and process quantum information and 
the payout is determined by a measurement made by the referee at the end of the 
interaction. 

Definition 4.2 (Quantum game). An r -round referee is an r- round measuring co- 
strategy {Rm}mes whose input spaces X\, . . . ,X r and output spaces 3^1, • • • , y r take 
the form 

X i = At ® Bi and ^ = Ci ® T>i 

for complex Euclidean spaces Ai, Bi, Ci, and T>i for 1 < i < r. An r -round quantum 
game consists of an r-round referee along with payout functions 

V A , V B : E R 

defined on the referee's set £ of measurement outcomes. For each such outcome 
m G S, Alice's payout is Va{jji) and Bob's payout is Vb{tti). Such a game is 
zero-sum if V^m) + Vsim) = for all m G S. 

During each round, the referee simultaneously sends a message to Alice and a 
message to Bob, and a response is expected from each player. The spaces Ai and Bi 
correspond to the messages sent by the referee during the ith round, while Ci and 
T>i correspond to their responses. After r rounds, the referee produces an output 
m G £ and awards the payouts Va(?7i) to Alice and Ve(m) to Bob. □ 
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Notice that Definition 14.21 places no restrictions on the strategies available to 
the players. For example, the players might employ a strategy that allows them 
to exchange quantum information directly, as opposed to an indirect exchange via 
messages to the referee. Alternatively, they might share entanglement or random- 
ness but be forbidden from direct communication, or they might even be forbidden 
from sharing entanglement or randomness altogether. 

Min-max theorem for zero-sum quantum games 

Let 

A c H+(Ci... r <g> Ax... r ) 

denote the set of all r-round non-measuring strategies for Alice's input spaces 
A\, . . . ,A r and output spaces Ci, . . . , C r . Similarly, let 

B C H + (Vi... r ®Bu.r) 

denote the set of all r-round non-measuring strategies for Bob's input spaces B%, . . . , B r 
and output spaces T>x, . . . , V r . 

In a zero-sum quantum game it cannot simultaneously be to both players' ad- 
vantage to communicate directly with each other or to share a source of random- 
ness or entanglement. Thus, we may assume that Alice and Bob play independent 
strategies represented by A e A and 5eB, respectively. In particular, their com- 
bined r-round strategy for the referee's input spaces Xi, . . . , X r and output spaces 
3^i, . . . , y r is described by the tensor product A g) B. 

For any zero-sum quantum game with referee {R m } and payout functions Va, Vb 
we write 

V(m) = V]4.(m) = — Ve(m) 
and define the Hermitian operator 

By Theorem 13.11 (Interaction output probabilities) Alice's expected payout for this 
game is given by 

V(m) (A ® B, R m ) = {A®B, R) 

while Bob's expected payout is ~{A®B,R). Because the inner product {A® B, R) 
is a bilinear function of A and B and because the sets A, B are compact and convex 
(as noted in Proposition 13 . 1 5 j ) , we may employ Fact 14.11 (Convex-bilinear min-max 
theorem) to obtain 

maxminM g) B,R) = minmax(A ® B.R). 
AeA _BeB BeB AeA 
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The real number represented by the two sides of this equation is called the value 
of the game. Any strategy A G A achieving the maximum of the left side of this 
equality is an optimal strategy for Alice, while any strategy B G B achieving the 
minimum of the right side of this equality is an optimal strategy for Bob. The 
following theorem is now proved. 

Theorem 4.3 (Min-max theorem for zero-sum quantum games). Every two-player 
zero-sum r-round quantum game has a value v with the following properties: 

(i) There exists a strategy for Alice that ensures a payout of at least v regardless 
of Bob's strategy. 

(ii) There exists a strategy for Bob that ensures a payout of at most v to Alice 
regardless of her strategy. 

4.1.2 Efficient algorithm to compute the value 

Theorem 14.31 (Min-max theorem for zero-sum quantum games) asserts that each 
zero-sum quantum game has a value. But can this value be easily computed? In 
this section we answer this question in the affirmative by exhibiting an efficient 
deterministic algorithm that takes as input a description of a referee {R m } and 
produces as output the value of the zero-sum quantum game defined by {R m }- 

This goal is achieved by expressing the value of the game as a semidefinite 
optimization problem and then employing the existence of efficient algorithms for 
semidefinite optimization. As these algorithms apply only to certain semidefinite 
optimization problems whose feasible sets are "well-bounded," it is necessary to 
establish the well-boundedness of our semidefinite optimization problem for zero- 
sum quantum games. 

An optimization problem for the value of a game 

Let {Rm}meT, be an r-round referee and consider the following super-operator de- 
fined for each measurement outcome m G X: 

n m : L(Z>i... r g> Bi... r ) L(C L .. r <g> Al... r ) 

: B ^ Tr Vl ... r ®Bi... r (( B ® 7 Ci... r ®^i...J Rm) ■ 

These super-operators have the property that (A <S> B, R m ) = (A, Q m (B)) for each 
measurement outcome m G £ and each choice of strategies A for Alice and B for 
Bob. Indeed, the set {^ m (-B)}mes is the r-round measuring co-strategy for Alice's 
input spaces Ai, . . . ,A r and output spaces C±, . . . ,C r obtained by "hard- wiring" 
Bob's strategy B into the referee. 

Let V(m) denote the payout to Alice in a zero-sum quantum game with referee 
{Rm}- For the moment, it is convenient to restrict our attention to payout functions 
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with < V(m) < 1 for all m. But we shall soon see that the ensuing discussion is 
easily generalized to arbitrary payout functions. 

Borrowing from the previous subsection, we define the super-operator 

= J]] V(m)tt m 

so that Alice's expected payout is given by (A,Q R (B)) when Alice and Bob play 
according to the strategies A and B, respectively. Naturally, Alice's maximum 
expected payout when Bob plays according to B is 

max(A,n R {B)). 

Let co-A denote the set of co-strategies for Alice's input and output spaces. Because 
< V(m) < 1 for all m, it follows that, regardless of the choice of B G B, the 
operator Q R (B) is always an element of some measuring co-strategy. Hence, we 
may apply Theorem 13.31 (Maximum output probability) to obtain the following 
alternate expression for Alice's maximum expected payout: 

min {A > : £Ir(B) ^ XQ for some Q G co-A} . 

Thus, the value of the game is given by 

minmax(A, Q R (B)) = min min {A > : Q R (B) ^ XQ for some Q G co-A} , 
BeB Aea beb 

which can equivalently be written as an optimization problem: 

minimize A 

subject to Q R (B) ^ XQ (4.1) 
BeB 
Q G co-A. 

Thus, an efficient solution for this optimization problem yields an efficient algorithm 
to compute the value of a zero-sum quantum game, provided that the payouts all 
fall within the interval [0, 1]. To compute the value of a game with an arbitrary 
payout function V we simply shift and scale V to a payout function V with payouts 
in [0, 1] by defining 



V(m) + | 


min 


n{V(n)}\ 




max n {V r (n)} + 


min n {V(n)}\ 



and then solve the optimization problem associated with V, from which the original 
value is easily recovered. 
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A semidefinite optimization problem for the value of a game 



Let us argue that the optimization problem ( 14.1 ft can be expressed as a semidefinite 
optimization problem in the super-operator form described in Section [3.3.21 Specif- 
ically, we construct a triple (<&,E,F) with the property that the optimal value of 
(14.11) equals the optimal value of the dual problem 

minimize (E,X) 
subject to $(A) y E 



To this end, we choose the super-operator $ so that the semidefinite variable 
X can be assumed without loss of generality to be block-diagonal with the form 



X=i B |, B 



Q 



Qi \ 

Qr J 



It is convenient to decompose $, E, and F into a hierarchy of block-diagonal 
operators as follows: 



E 




-^Bob 

-^co-Alice 



and 





•I' : ! B ~ 1 H> | 'lY„ 



It is clear that the condition >z E is equivalent to 

^Bob(-B) h E Boh: 

$cc~Alice(Q) h E 

CO- Alice ; 

Q r ®I Cr h tt R (B r ). 

The idea is that we will choose $Bob, ^co- Alice so that the first two constraints ensure 
that B r is a valid r-round strategy for Bob and that Q r <8> Ic r is ( a scalar multiple 
of) a valid r-round co-strategy for Alice's input and output spaces. The third 
constraint clearly captures the semidefinite inequality condition of (14. ip . 
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Let us fill in the details for $, E, and F. Define 



$Bob : B ^ 



\ 



Tr V2 (B 2 )-B 1 ®I B2 



$ co-Alice '■ Q ^ 



and 



\ 



Tr< Dr (B r )-B r - X ®lB r j 
\ 



Qr-l <S) ICr-i ~ Tl Ar (Qr) ) 



E 



Bob 



V 







E 



co- Alice 



0. 



For the objective function, we select 



-^Bob — 0, F r 



co-Alice 



/ U o \ 



so that 



= (F co . Alice ,Q) = (J A ,Qi) = Tr(Qi). 



Correctness of the semidefinite optimization problem 

Let us verify that the optimal value of the dual problem ($, E, F) equals the optimal 
value of (14.11) . To the extent that (<&, E, F) resembles the semidefinite optimization 
problem appearing in Section 13.3.21 the material in that section — particularly the 
proofs of Lemmas 13.121 and 13.131 — can be reused in the present setting. 

Lemma 4.4 (Correctness of (<&,E,F)). For each dual feasible X for (<&,E,F) 
there is another dual feasible X' whose objective value p equals that of X and whose 
diagonal blocks B[, . . . , B' r , Q' x , . . . , Q' r have the property that 

1. B[ is an i-round non-measuring strategy, and 

2. Q\ <g> Ic t is an i-round non-measuring co-strategy multiplied by p 



for each i — 1, 
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Proof. Let Bi, ... , B r} Qi, ■ ■ ■ ,Q r denote the diagonal blocks of X. First, we choose 
B[, . . . , B' r and show that they satisfy item [T] in the statement of the lemma. The 
proof is nearly identical to that of Lemma 13.121 As X is feasible, we know that 
^Bob(-B) y E-Qob and therefore 

TrvABi) h I Bl 
Tr V2 (B 2 )y_B 1 ®I B2 

It is clear that there is a B[ ^ Bi such that Ttx> 1 {B[) = Similarly, for each 
i = 2,...,r there is a B\ < Bi such that Ti Vt ( B 'i) = B 'i-i®h v That B[, . . . , B' r are 
non-measuring strategies follows from Theorem l3.2l (Characterization of strategies). 

Next, we choose Q[, . . . , Q' r and show that they satisfy item [2] in the statement 
of the proposition. The proof is nearly identical to that of Lemma 13. 131 As X is 
feasible, we know that $ co - Alice (Q) b -Eco-Aiice and therefore 

Ql®I Cl ^Tr^ 2 (g 2 ) 

Qr-i® icr-x >= Tr^ r (g r ). 

As X has objective value p, it must be that p = Tr(Qi). If p = then it must hold 
that Qi = • • • = Q r = 0, so item [2] holds trivially for the choice Q[ = ■ ■ ■ = Q' r = 0. 

Assume then that p > 0. It is clear that there is a Q' 2 y Q2 such that Qi ® 
Ic x = Tr^ 2 (Q' 2 ). Similarly, for each % = 3, ...,r there is a y Qi such that 
<8> Ici-i = Tr^^Q'j). Taking Q[ = Qi and using the fact that p = Tr(Qi), it 
follows from Theorem 13.21 (Characterization of strategies) that each ^Q' { <g> is a 
non-measuring co-strategy. 

At this point, we have chosen the diagonal blocks B[, . . . , B' r , Q[, . . . , Q' r of A'. 
That X and X' have the same objective value follows immediately from the choice 
Q'i = Qi- It remains only to verify that Q' r ® I Cr >z Qn(B' r ). But this inequality 
follows immediately from the facts that Q' r y Q r , that B' r ^ B r , and that the 
super-operator flu is completely positive. □ 

Computational efficiency and well-boundedness 

Now that we have expressed the value of a zero-sum quantum game as a semidefi- 
nite optimization problem, it remains only to argue that an existing algorithm for 
semidefinite optimization can be applied to our specific problem ($,E,F). 

The algorithm we employ is the ellipsoid method |Kha79[ [GLS88J, which ap- 
proximates the optimal value of a semidefinite optimization problem to arbitrary 
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precision in polynomial-time, provided that the set of feasible solutions is well- 
bounded — that is, it contains a ball of radius S and is, in turn, contained in a ball 
of radius A such that the ratio A/5 is not too large. More precisely, we have the 
following. 

Fact 4.5 (Efficient algorithm for semidefinite optimization). The following promise 
problem admits a deterministic polynomial-time solution: 

Input. A semidefinite optimization problem ($, A, B) and positive real numbers 
e, 8, A. The numbers e, 5, and A are given explicitly in binary, as are the real 
and complex parts of each entry of J{&), A, and B. 

Promise. There exists a primal [dual] feasible solution X such that for all Hermi- 
tian operators H with \\H ||p < 5 it holds that X Q + H is primal [dual] feasible. 
Moreover, for all primal [dual] feasible solutions X it holds that ||X||f — A. 

Output. A real number 7 such that \ j — a\ < e, where a is the optimal value of 
the primal [dual] problem associated with ($, A, B). 

In addition to the ellipsoid method, interior point methods are also used for 
semidefinite optimization [dK02l IBV04J . The reader is referred to Watrous [Wat09j 
and the references therein for more detailed discussion of algorithms for semidefinite 
optimization problems written in super-operator form. 

Unfortunately, the set of dual feasible solutions associated with our problem 
($,F, F) is unbounded — if X is dual feasible then so is AX for all A > 1. To 
remedy this problem, it suffices to augment the original problem ($, E, F) with the 
additional constraint Tr(X) < t on dual feasible solutions X for some appropriately 
large choice of t. Such a constraint can be incorporated into the super-operator form 
by defining 



If t is large enough so that an optimal solution X* for the dual problem ($, E, F) 
has Tr(X*) < t then X* is also optimal for ($', E', F). In this case, we can obtain 
the optimal value for ($, F, F) by solving ($',F',F). Thus, it suffices to prove 
well-boundedness for (<3>',F',F). 

Lemma 4.6 (Well-boundedness of ($',F',F)). There exists a dual feasible X for 
($, F, F) and positive real numbers 5, t such that: 

1. For all Hermitian operators H with \\H\\p < 5 it holds that Xq + H is dual 
feasible with Tr(Xo + H) < t. 
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2. The optimal value of the dual problem ($, E, F) is achieved by a dual feasible 
X* with Tr(X*) < t. 



In particular, we may select 

5 = Vl (dim(D 1 ... r )- 1 ) , 

t = 0(r 3 dim (^i... r <g> Xi... r ® C x ... r )) . 

Proof. First, we select X and 5; the quantity t will be chosen at the end of the 
proof. We begin by choosing the first collection Bi, . . . , B r of diagonal blocks for 
X . For each i — 1, . . . , r let 

B - 1+1 T 

Bi ~ dim(7\,) P " ' 

and let Yj be any Hermitian operator with 

||y,||< \ 

3 dim(r > 1 j) 

so that 

% + | z + | 

Iv 1 ... i ®B 1 ... i di Bi + Yi ^ — — — r/D 1 ... i ®Bi.. 



din, CP,..,) ' ' dim ( Pl . 

As in the proof of Lemma I3.14[ it is tedious but straightforward to verify that 

Ti Vl (B 1 + Y 1 ) y I Bl 

Ti V2 (B 2 + Y 2 ) y (Bi + yO®/^ 

Tr^^ + y) >- {B r ^ + Y r _ x )®I Br . 



Next, we choose the remaining diagonal blocks Qi, . . . ,Q r for X . To this end, 
let 7 be a real number large enough to guarantee that 

Q R (B r + Y r ) < lIc 1 ... r ®Ax...ri 

regardless of the choice of Y r . (The precise value of 7 will be chosen later.) For 
each i — 1, . . . , r let 

= (r - i + 2) dim(A+i...r)7- ? c 1 ... i _ 1 ®^ 1 ...i 
and let be any Hermitian operator with 

dim(^4< + i... r )7 
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so that 

(Q r + Z r )®I Cr y Q R (B r + Y r ) 
(Qr-i + Z P _i) <g> Jcr-i >- Tr^ r (g r + Z r ) 

(Qi + ^)®/ Cl >- Tr^ 2 (g 2 + Z 2 ). 

It follows from these semidefinite inequalities that the block-diagonal operator Xo 
with diagonal blocks Bi, . . . , B r , Qi,...,Q r is a strictly dual feasible solution to 
($, E, F). Moreover, for any Hermitian operator H with diagonal blocks Y±, . . . , Y r , 
Z x , . . . , Z r and || H\\-p < 8 it must be that X + H is also a strictly feasible solution, 
provided 

~~ 3 dim(X>i... r ) 

Next, let us choose an appropriate value for 7, which will enable us to establish 
the desired upper bound t. For notational convenience, write 

r + | 

v = — 

dim(I?i... r ) 

so that 

B r + Y r ^ vIvi... r ®Bi... r - 
As fl R is completely positive, it follows that 

Cl R (B r + Y r ) ^ ^(/B 1 ... f KBi.., r ) = ^'IVp; . B i.., (R) 

where R is an operator with ^ R ^ J(^f*) for some completely positive and 
trace-preserving super-operator \l> : L(3^i... r ) _ > L(^i...r)- Proposition 11.31 tells us 
that || J(^*)||tt = dim(3^i... r ), from which we obtain ||i?|| < dim(3^i... r ) and hence 

R r< dim(y 1 ... r )Iy 1 r( ^ Xl r . 

It follows that 

Q R (B r + Y r ) r< z/dim (^i... r (8) X>i... r (8) #i... r ) I Cl ...M... r 
and hence we may select 

7= (r + |)dim(yi... r ®Bi... r ). 

It is straightforward but tedious to verify that for every Hermitian H with || H\\p < 5 
it holds that 

Tr(X + H)<r(r + I) (dim^...,.) + 7 dim(A...r ® Ci...r)) . 
Substituting our choice of 7, we find that it suffices to select 

t = 2(r + 2) 3 dim (y L .. r g> A' 1 ... r <g> C L .. r ) . 
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To see that this choice of t also bounds the trace of an optimal solution, we note that 
by Lemma 14.41 the diagonal blocks B\, . . . , £>*, Q*, . . . , Q* of any optimal solution 
X* can be assumed to be strategies and co-strategies, respectively, from which it 
is easy to see that 

Tr(X*) < r (dim(jBi.„ r ) + dim(Ci... r )) < t. 

□ 

Lemma I4TB1 ( Well-boundedness of ($', E', F)) provides all that we need in order 
to apply Fact 14.51 (Efficient algorithm for semidefmite optimization). While the 
bound t on the set of feasible solutions to (Q',E',F) from Lemma [4.61 is stated in 
terms of the trace norm, it is straightforward to convert this quantity into a bound 
A in terms of the Frobenius norm via the norm inequalities listed in Section ["1.2.11 
The following theorem is now proved. 

Theorem 4.7 (Efficient algorithm to compute the value of a quantum game). The 
following problem admits a deterministic polynomial-time solution: 

Input. A two-player zero-sum quantum game specified by an r-round quantum ref- 
eree {R m }, o, payout function V(m), and an accuracy parameter e > 0. The 
real numbers V(m) and e are each given explicitly in binary, as are the real 
and complex parts of each entry of the matrices R m . 

Output. A real number v such that the value of the game specified by {R m } and 
V(m) lies in the open interval (v — e, v + e) . 

4.2 Quantum interactive proofs 

In this section we provide an application of the theory of zero-sum quantum games 
developed in Section 14.11 to quantum interactive proofs. In particular, we observe 
that the existence of an efficient algorithm that computes the value of a zero-sum 
quantum game implies the equivalence of the complexity classes QRG and EXP. 
Here QRG is the class of problems that admit quantum interactive proofs with two 
competing provers, whereas EXP is the fundamental class of problems that admit 
deterministic (classical) exponential-time solutions. 

We also extend an existing parallel repetition result for single-prover quantum 
interactive proofs so that it applies to interactions with an arbitrary number of 
messages, as opposed to interactions with only three messages. The technique 
employed toward this end is then applied to yield a similar parallel repetition result 
for quantum interactive proofs with competing provers. 

This section begins with a primer on interactive proofs, followed by a brief 
historical survey before the results are presented. 
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Interactive proofs 

An interactive proof consists of an interaction between a verifier and a prover re- 
garding some common input x, which is viewed as an instance of a yes-no decision 
problem P. Throughout the interaction the verifier is restricted to randomized 
polynomial-time computations, while the prover's computational power is unlim- 
ited. After the interaction the verifier produces a binary outcome indicating ac- 
ceptance or rejection of x. The verifier's goal is to accept those inputs that are 
yes-instances of P and reject those inputs that are no-instances of P. Typically, 
the verifier does not have the computational power to make this determination him- 
self and so he must look to the prover and his unlimited computational power for 
help. However, the goal of the prover is always to convince the verifier to accept, 
regardless of whether the input x is actually a yes-instance. Hence, the verifier 
must be careful to distinguish truthful proofs from false proofs. 

A decision problem P is said to admit an interactive proof if there exists a verifier 
with the property that a prover can convince him to accept every yes-instance of 
P with high probability, yet no prover can convince him to accept any no-instance 
of P except with small probability. Such an interactive proof is said to solve the 
problem P. The complexity class of decision problems that admit interactive proofs 
is denoted IP. In a quantum interactive proof, the verifier and prover may process 
and exchange quantum information. Whereas a classical verifier is restricted to 
randomized polynomial-time computations, a quantum verifier is instead restricted 
to quantum circuits that can be generated uniformly in deterministic polynomial 
time. The corresponding complexity class is denoted QIP. 

An interactive proof with competing provers has two provers — one, as before, 
whose goal is always to convince the verifier to accept, and another, whose goal 
is to convince the verifier to reject. The class of problems that admit interactive 
proofs with competing provers is denoted RG, for "refereed games", owing to the 
similarity between these two models of interaction. As above, we may speak of 
quantum interactive proofs with competing provers and the associated complexity 
class QRG. 

Background 

Interactive proofs were introduced [Bab85t IGMR89] as a generalization of efficiently 
verifiable proofs — a fruitful concept that characterizes the ubiquitous complexity 
class NP. The generalization lies in the interaction: whereas any problem in NP 
may be verified with a single message from the prover to the verifier, interactive 
proofs allow the verifier to ask a series of questions of the prover, possibly basing 
future questions upon previous answers. In order to make this generalization from 
NP to IP nontrivial, the verifier is permitted a source of randomness. (Hence the 
allowance in interactive proofs for a small probability of error.) 

Naturally, every problem in NP admits an interactive proof. Moreover, it is 
conjectured that interactive proofs with only a constant number of messages cannot 



73 



solve problems outside NP [MV99J. On the other hand, interactive proofs with 
an unbounded number of messages are surprisingly powerful: every problem in 
PSPACE admits such an interactive proof [LFKN921 ISha92j . By contrast, in any 
quantum interactive proof it suffices that the verifier and prover exchange only three 
messages [KWOOJ. It is not difficult to see that PSPACE contains IP, from which 
the characterization IP = PSPACE then follows. In a recent breakthrough, Jain, 
Ji, Upadhyay, and Watrous proved that PSPACE also contains QIP, from which 
one obtains QIP = PSPACE |JJUW09j . 

Feige and Kilian showed that every problem that can be solved in determin- 
istic exponential-time can also be solved by an interactive proof with competing 
provers |FK97j . That these proofs can be simulated in deterministic exponential 
time follows from Ref. |KM92j . and hence we have the complexity theoretic equal- 
ity RG = EXP. In this section we employ the algorithm from Section 14.1.21 for 
computing the value of a zero-sum quantum game to show that QRG = EXP. 

Containment of QRG inside EXP 

Theorem 4.8 (QRG = EXP). Every decision problem that admits a quantum 
interactive proof with competing provers also admits a deterministic exponential- 
time solution. It follows that QRG = EXP . 

Proof. Let P be any problem that admits a quantum interactive proof with com- 
peting provers. We will exhibit a deterministic exponential-time algorithm that, for 
each input x, correctly decides whether x is a yes-instance of P or a no-instance. 

For each fixed input x, the actions of the verifier may be represented by a two- 
outcome measuring co-strategy {-R a cce P t, -^reject} where the two provers combine to 
implement the corresponding strategy. The operators in this co-strategy may be 
computed explicitly in deterministic exponential time by running the polynomial- 
time algorithm that generates a description of the quantum circuits corresponding 
to the actions of the verifier on input x and then converting that description into 
an exponential-sized measuring co-strategy in the standard way. 

Consider the two-player zero-sum quantum refereed game defined by the referee 
{-Racce P t,-Rreject} and the payout function 

^(accept ) = 1, K(reject) = 0. 

The value of this game equals the probability with which the verifier is convinced 
to accept the input when the two-provers act according to optimal strategies. By 
Theorem 14. 71 (Efficient algorithm to compute the value of a quantum game), there is 
a deterministic algorithm that approximates this value to arbitrary precision in time 
polynomial in the bit length of {-Raccept, -Rreject}, which we know to be exponential 
in the input x. By running this algorithm and computing this probability, it is 
possible to determine whether or not x is a yes-instance of P. Thus, P G EXP. 
As P was selected arbitrarily from QRG, it follows that QRG C EXP. As QRG is 
already known to contain EXP, it follows that QRG = EXP. □ 
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Parallel repetition of many-message quantum interactive proofs 

Thus far, our discussion of interactive proofs has been restricted to protocols that 
succeed with high probability. But this condition is quite vague — what is a "high" 
probability? Can interactive proofs be somehow transformed so as to amplify their 
probability of success? 

To address these questions, we need a more specific definition of interactive 
proof. A decision problem P is said to admit an interactive proof with completeness 
error c and soundness error s if the following hold: 

(i) If a; is a yes-instance of P then there is a prover who can convince the verifier 
to accept with probability at least 1 — c. 

(ii) If x is a no-instance of P then no prover can convince the verifier to accept 
with probability larger than s. 

It is not difficult to see that any decision problem whatsoever admits an interactive 
proof with 1 — c < s. Clearly then, interactive proofs are only interesting when 
1 — c > s. When this condition is met, the interactive proof may be transformed 
so as achieve c,s<e for any desired e > 0. This reduction in error is achieved 
by a method called sequential repetition, whereby the verifier simply repeats the 
protocol many times in succession and then bases his final decision upon a weighted 
vote of the outcomes of the individual repetitions. Under sequential repetition, the 
probability of error decreases exponentially in the number of repetitions. 

A side-effect of sequential repetition is that the number of messages exchanged 
between the verifier and prover increases with each repetition. Sometimes, it is 
desirable to achieve error reduction without increasing the number of messages in 
the interaction. The standard transformation meeting this criterion is called parallel 
repetition, whereby many copies of the protocol are executed simultaneously instead 
of sequentially. The danger of parallel repetition is that the prover need not treat 
each repetition independently. Instead, he might somehow attempt to correlate the 
repetitions so as to thwart the exponential reduction in error. Therefore, before 
parallel repetition may be relied upon to reduce error, it must first be established 
that the prover cannot significantly affect the probability of acceptance by deviating 
from a strategy that treats the repetitions independently. 

For classical single-prover interactive proofs, it can be shown that parallel repe- 
tition works as desired to achieve exponential error reduction. For quantum single- 
prover interactive proofs, parallel repetition is known to work only when 

(i) the verifier and prover exchange at most three messages, and 

(ii) the verifier's final decision depends upon a unanimous vote of the repetitions 
(as opposed to some other weighting of the repetitions, such as a majority 
vote) . 
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(See Kitaev and Watrous for proofs of this and other properties of quantum inter- 
active proofs [KWOOj .) 

In this section, we show that condition (i) is unnecessary. Specifically, we prove 
the following. 

Theorem 4.9 (Parallel repetition of many-message quantum interactive proofs). 
Consider the k-fold parallel repetition of an arbitrary r-round quantum interactive 
proof with soundness error s. If the verifier in the repeated protocol accepts only 
when all k repetitions accept then the repeated protocol has soundness error s k . 

Proof. Suppose that the interactive proof in the statement of the theorem solves 
the decision problem P. The theorem makes no claim about the case where the 
input is a yes-instance of P, so we need only consider those inputs which are no- 
instances of P. We must show that the verifier in the repeated protocol can be 
made to accept such an input with probability not exceeding s k . 

For any such input, the actions of the verifier may be represented by a two- 
outcome r-round measuring strategy {i?acce P t, -^reject} where the prover implements 
the corresponding r-round co-strategy. As the verifier has soundness error s, it 
follows from Theorem 13.31 (Maximum output probability) that there exists an r- 
round non-measuring strategy R for the referee's input and output spaces with the 
property that 

-^accept — sR. 

It follows from a semidefinite inequality proven in Ref. |CSUU06l Proposition 5] 
that 

pCgifc j k p®fc 
-^accept - 5 - n 

(The cited inequality is not as explicit in the final journal version |CSUU08] of 
Ref. [CSUU06] .) 

For the repeated protocol with unanimous vote, Theorem 13.31 implies that the 
maximum probability with which the verifier can be made to accept is given by 

min { A > : R^. ept d AQ for some r-round non-measuring strategy Q } . 

Taking A = s k and Q = R® k completes the proof. □ 

Theorem 14.91 makes no claim about the effect of a unanimous vote on the com- 
pleteness error. But for single-prover interactive proofs the question is moot, since 
these proofs can be assumed to have zero completeness error |KW00] . In particular, 
for yes-instances of P the prover in the /c-fold repeated protocol can achieve zero 
completeness error by playing an independent copy of the zero-error strategy for 
each of the k repetitions. 
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Parallel repetition of quantum interactive proofs with competing provers 



Fortunately, Theorem 14.91 can be adapted with little difficulty to say something 
meaningful about the parallel repetition of quantum interactive proofs with com- 
peting provers. 

Theorem 4.10 (Parallel repetition of quantum interactive proofs with competing 
provers). Consider the k-fold parallel repetition of an arbitrary r -round quantum in- 
teractive proof with competing provers that has completeness error c and soundness 
error s. 

If the verifier in the repeated protocol accepts only when all k repetitions accept 
then the repeated protocol has completeness error kc and soundness error s k . Simi- 
larly, if the verifier in the repeated protocol rejects only when all k repetitions reject 
then the repeated protocol has completeness error c k and soundness error ks. 

Proof. We prove only the first claim in the statement of the theorem, as the second 
claim follows by symmetry. 

Suppose that the interactive proof in the statement of the theorem solves the 
decision problem P and suppose first that the input is a yes-instance of P. We must 
show that there is a "yes-prover" who convinces the verifier in the repeated protocol 
to accept with probability at least 1 — kc, regardless of the strategy employed by 
the other prover, whom we call the "no-prover" . 

The yes-prover we seek merely plays an independent copy of the optimal strategy 
for each of the k repetitions. Of course, no no-prover can win any one of the k 
repetitions with probability greater than c. It then follows from the union bound 
that the repeated game with unanimous vote has completeness error at most kc. 

Now suppose that the input is a no-instance of P. For this case, we must 
find a no-prover who convinces the verifier in the repeated protocol to reject with 
probability at least 1 — s k , regardless of the strategy employed by the yes-prover. 

Toward that end, consider an optimal no-prover for the original protocol. Bor- 
rowing from the proof of Theorem 14. 9[ the combined actions of the verifier and 
no-prover in this protocol may be represented by a two-outcome r-round measur- 
ing strategy {A^ accept , Abject} where the yes-prover implements the corresponding 
r-round co-strategy. That the verifier-no-prover combination for the repeated pro- 
tocol specified by {A^ ccept , iV r ' eject } with 

ACept = Accept 

has soundness error s k now follows exactly as in the proof of Theorem 14.91 

Moreover, we see from this proof that the desired optimal no-prover for the 
repeated protocol simply plays an independent copy of the optimal strategy for 
each of the k repetitions. □ 



77 



Theorem l4.10l tells us that we may achieve an exponential reduction in complete- 
ness (or soundness) at the cost of a linear increase in soundness (or completeness). 
Such a transformation is useful, for example, for protocols for which either com- 
pleteness or soundness is already small — these proofs can be transformed so that 
both completeness and soundness are small. 

More specifically, suppose we have a family of protocols with the property that, 
for some fixed constants e, s G (0, 1) and for any desired m, there is a protocol 
in the family with completeness error e m and soundness error s. Then for any 
desired k, we may choose m large enough and employ fc-fold parallel repetition 
with unanimous vote to obtain a protocol in which both completeness error and 
soundness error are no larger than s k . Indeed, such a transformation was employed 
in Ref. |GW05] to reduce error for so-called "short quantum games" . 

4.3 Kitaev's bound for strong coin-flipping 

In this section we provide a simplified proof of Kitaev's bound for strong quan- 
tum coin-flipping, which states that a cheating party can always force any desired 
outcome upon an honest party with probability at least l/v2. We begin with a 
definition of the coin-flipping problem, followed by a brief survey, before ending the 
section with our contribution. 

Strong and weak coin-flipping 

Suppose that two parties — Alice and Bob — wish to agree on a random bit. (That is, 
they wish to flip a fair coin.) The parties are physically separated, so the agreement 
must be reached by an exchange of messages via remote communication. Moreover, 
the two parties do not trust each other, meaning that each party suspects that the 
other might attempt to force a particular result of the coin flip rather than settle 
for a uniformly random result. The goal is to devise a protocol that produces the 
fairest possible coin flip, even in the case where one cheating party deliberately 
attempts to bias the result of the flip. 

For example, Alice could simply flip a fair coin for herself and announce the 
result to Bob, who meekly agrees to whatever Alice dictates. If both parties adhere 
to these honest strategies then it is clear that they will produce a perfectly correlated 
random bit as desired. Even if Bob cheats, there's nothing he can do to prevent 
Alice from producing a perfectly fair coin toss. (Indeed, Alice's honest strategy is 
to completely ignore Bob.) But if Alice decides to cheat then Bob is out of luck; his 
mindless strategy of taking Alice at her word allows Alice to force Bob to produce 
any outcome she desires. While this simple protocol is robust against a cheating 
Bob, it is completely vulnerable to a cheating Alice and is therefore a poor solution 
to the problem at hand. 
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Let us be more specific about this problem. A strong coin-flipping protocol with 
bias e consists of an honest strategy for Alice and an honest strategy for Bob such 
that: 

1. If both parties follow their honest strategies then both parties produce the 
same outcome, and that outcome is chosen uniformly at random from {0, 1}. 

2. If only one party follows his or her honest strategy then the maximum prob- 
ability with which the cheating party can force the honest party to produce 
a given outcome is at most 1/2 + e. 

The adjective strong refers to the fact that a cheater cannot bias an honest party's 
outcome toward either result or 1. By contrast, weak protocols assume that one 
player desires outcome and the other desires outcome 1. The only requirement 
for weak protocols is that a cheater cannot bias the result toward his or her desired 
outcome. In a quantum coin-flipping protocol, the parties may process and exchange 
quantum information. 

Background 

This problem was introduced in the classical setting by Blum |Blu81] , who called 
it coin-flipping by telephone. The problem is of interest to cryptographers because 
it is a primitive — a basic tool — for secure two-party computations. In this setting 
there is little need to distinguish between strong and weak coin-flipping. Indeed, 
Blum showed that even strong coin-flipping with zero bias is possible under certain 
computational assumptions. Conversely, without any such assumptions it is not 
difficult to see that even weak coin-flipping is impossible. In particular, for each 
outcome b £ {0, 1} either (i) a computationally unrestricted cheating Alice can force 
outcome b upon honest-Bob with certainty, or (ii) a computationally unrestricted 
cheating Bob can force the opposite outcome upon honest- Alice with certainty. 

The quantum version of this problem admits some surprising contrasts to its 
classical counterpart. Whereas unconditional classical coin-flipping is impossible, 
there is a weak quantum coin-flipping protocol that achieves arbitrarily small bias in 
the limit of the number of messages exchanged between the parties [Moc07j . More- 
over, the existence of such a protocol for weak quantum coin-flipping implies the 
existence of a strong quantum coin-flipping protocol that achieves bias arbitrarily 
close to I/a/2 — 1/2 « 0.207 |C K09| . This protocol for strong quantum coin-flipping 
is the best possible, as it matches a lower bound due to Kitaev [Kit02j. (Kitaev did 
not publish this proof, but it appears in Refs. |ABDR04t IRoh04] .) More compre- 
hensive histories of quantum coin-flipping can be found in the breakthrough works 
of Mochon |Moc07] , and Chailloux and Kerenidis [CK09J. 
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Our contribution 

We now provide an alternate and simplified proof of Kitaev's lower bound for strong 
quantum coin-flipping. 

Theorem 4.11 (Kitaev's bound for strong quantum coin-flipping). In any strong 
quantum coin-flipping protocol, a computationally unrestricted cheating party can 
always force a given outcome on an honest party with probability at least l/y/2. 

Our new proof. In any quantum coin-flipping protocol the actions of honest- Alice 
are represented by a two-outcome measuring strategy {A , A\) and the actions of 
honest-Bob are represented by a two-outcome measuring co-strategy {Bq,B\}. By 
Theorem 13.11 (Interaction output probabilities), the definition of a quantum coin- 
flipping protocol requires 

1/2= (A ,B ) = (A 1 ,B 1 ). 

Choose any outcome b e {0, 1} and let p denote the maximum probability with 
which a cheating Bob could force honest-Alice to output b. Obviously we have 
p > 1/2. Theorem 13.31 (Maximum output probability) implies that there must exist 
a strategy Q for Alice such that A b < pQ. If a cheating Alice plays this strategy Q 
then honest-Bob outputs b with probability 

(Q,B b )>-(A b ,B b ) = ^. 

p 2p 

As max{p, ^} > ly/2 for all p > 0, it follows that either honest- Alice or honest-Bob 
can be convinced to output b with probability at least 1 / a/2. □ 

This proof makes clear the limitations of strong coin-flipping protocols: the 
inability of Bob to force Alice to output b directly implies that Alice can herself 
bias the outcome toward b. By definition, weak coin-flipping protocols are not 
subject to this limitation. 
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Chapter 5 
Distance Measures 



In this chapter we introduce a new norm for super-operators that generalizes the 
diamond norm and we argue that this norm quantifies the observable difference 
between quantum strategies. Indeed, we establish an extension of a result from 
Ref. (GW05 J stating that each pair of convex sets So, Si of r-round strategies 
has a fixed r-round measuring co-strategy {T a } with the property that any pair 
S G S , Si G Si can be distinguished by {T a } with probability determined by the 
minimal distance between So and Si as measured by our new norm. 

In order to prove this distinguishability result we also establish several properties 
of the new norm, including characterizations of its unit ball and dual norm. We 
end the chapter with a discussion of the dual of the diamond norm. 

When not explicitly stated otherwise, the results of this chapter are the sole 
work of the author and were not published prior to the present thesis. 

5.1 A new norm for strategies 

In order to best argue that our new norm captures the distinguishability of quantum 
strategies, we begin with a discussion of the trace norm and explain its use in 
distinguishing quantum states. We then proceed with a discussion of the diamond 
norm for super-operators and explain its use in distinguishing quantum operations. 
Only then do we introduce our new norm and note the similarities with the diamond 
norm and trace norm for the purpose of distinguishing quantum strategies. We 
conclude the section with several immediate observations concerning this new norm, 
including the fact that it agrees with the diamond norm wherever it is defined. 

The trace norm as a distance measure for quantum states 

Recall from Section n.2. II that the trace norm ||X||T r of an arbitrary operator X is 
defined as the sum of the singular values of X. If X is Hermitian then it is a simple 
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exercise to verify that its trace norm is given by 

\\X\\ T r = max{(P -P u X) : P ,Pi^O, P + P 1 = I} 

= max {(P — Pi, A) : {Po, Pi} is a two-outcome measurement} . 

The trace norm provides a physically meaningful distance measure for quantum 
states in the sense that it captures the maximum likelihood with which two states 
can be correctly distinguished. Let us illustrate this fact with a simple example 
involving two parties called Alice and Bob and a fixed pair of quantum states po, p\. 
Suppose Bob selects a state p G {po, Pi} uniformly at random and gives Alice a 
quantum system prepared in state p. Alice has a complete description of both po 
and pi, but she does not know which of the two was selected by Bob. Her goal 
is to correctly guess which of {po,p\} was selected based upon the outcome of a 
measurement she conducts on p. 

Since Alice's guess is binary-valued and completely determined by her mea- 
surement, that measurement can be assumed to be a two-outcome measurement 
{P ,Pi} wherein outcome a G {0, 1} indicates a guess that Bob prepared p = p a . 
Letting C denote the event that Alice's guess is correct, basic quantum formalism 
tells us that 

Pr[C] = ±<P ,Po> + |<iW 
Prhq = |(P 1 ,p ) + |(Po,Pi), 

implying that 

Pr[q-PrhC] = !(P -Pi,Po-pi>- 

As Pr[C] + Pr[-iC] = 1, we obtain the following alternate expression for the prob- 
ability with which Alice's guess is correct: 

Pr[C] = l + l(P -P 1 ,p -p 1 ) < ! + !||p - Pl || Tr 

with equality achieved at the optimal measurement {Po, Pi} for Alice. This funda- 
mental observation was originally made by Helstrom [Hel69j. 

The diamond norm as a distance measure for quantum operations 

The trace norm extends naturally to super-operators, but this extension does not 
lead to an overly useful distance measure for quantum operations. To achieve such 
a measure, the trace norm must be modified as follows. 

Definition 5.1 (Super-operator trace norm, diamond norm). For an arbitrary 
super-operator $ the super- operator trace norm ||3>||t* of $ is defined as 

||$|| Tr = max ||$(X)|| Tr . 

||X||Tr = l 
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The diamond norm ||$|| of <3> is defined as 



del 



||$||o = sup ||$ <g> IwHtt 

where the supremum is taken over all finite-dimensional complex Euclidean spaces 
W. □ 



Much is known of the diamond norm. For example, if $ has the form $ : 
L(A') —7- L(y) then the supremum in the definition of ||$||<> is always achieved 
by some space W whose dimension does not exceed that of the input space X 
|Kit97l IAKN98] . As a consequence, the supremum in the definition of the diamond 
norm can be replaced by a maximum. Moreover, if $ is Hermitian-preserving and 
dim(W) > dim(A') then the maximum in the definition of ||<3? ® IwIItt is always 
achieved by some positive semidefinite operator X |RW05j . Thus, if $ is Hermitian- 
preserving then its diamond norm is given by 

|| $ ||o = max || ($ ® lw) (p) || Tr 

= max(P -P 1 ,($® l w )(p)) 

where the maxima in these two expressions are taken over all spaces W with di- 
mension at most X, all states p G H + ( f Y® W), and all two-outcome measurements 
{Po,Px}cH+(y®>V). 

The diamond norm is to quantum operations as the trace norm is to quantum 
states: it provides a physically meaningful distance measure for quantum operations 
in the sense that the value || $o — 3*i ||o quantifies the observable difference between 
two quantum operations <&o,$i. As before, this fact may be illustrated with a 
simple example. Suppose Bob selects an operation from $ G {$o,$i} uniformly 
at random. Alice is granted "one-shot, black-box" access to $ and her goal is 
to correctly guess which of $q,$i was applied. Specifically, Alice may prepare a 
quantum system in state p and send a portion of that system to Bob, who applies $ 
to that portion and then returns it to Alice. Finally, Alice performs a two-outcome 
measurement {P , Pi} on the resulting system (<3> <g> 1) (p) where outcome a G {0, 1} 
indicates a guess that $ = $ a . 

Letting C denote the event that Alice's guess is correct, we may repeat our 
previous derivation of Pr[C] to obtain 

Pr[C] = | + i(P - P u ($ ® 1) (p) - ($i ® 1) 0)> 
< | + ±||$o-$i||o 

with equality achieved at the optimal input state p and measurement {Po,Pi} for 
Alice. 

It is interesting to note that the ability to send only part of the input state 
p to Bob and keep the rest for herself can enhance Alice's ability to distinguish 
some pairs of quantum operations, as compared to a simpler test that involves 
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sending the entire input state to Bob. Indeed, there exist pairs <3> > $1 of quantum 
operations that are perfectly distinguishable when applied to half of a maximally 
entangled input state — that is, ||$ — &i\\o — 2 — yet they appear nearly identical 
when an auxiliary system is not used — that is, ||$o — ^iHtt ~ 0. An example of 
such a pair of super-operators can be found in Watrous | Wat 08] . along with much 
of the discussion that has occurred thus far in this section. It is this phenomenon 
that renders the super-operator trace norm less useful than the diamond norm for 
the study of quantum information. 

Additional properties of the diamond norm are established in this thesis by 
Lemmas EI21 EH and EUl of Section |53J 

The strategy r-norm as a distance measure for quantum strategies 

The simple guessing game between Alice and Bob extends naturally from quan- 
tum operations to quantum strategies. Let So, Si be arbitrary r-round quantum 
strategies and suppose Bob selects S G {So, Si} uniformly at random. Alice's task 
is to interact with Bob and then decide after the interaction whether Bob selected 
S = S or S = Si. 

Theorem 13.11 (Interaction output probabilities) establishes an inner product re- 
lationship between measuring strategies and co-strategies that is analogous to the 
relationship between states and measurements. As such, much of our previous dis- 
cussion concerning the task of distinguishing pairs of states can be re-applied to 
the task of distinguishing pairs of strategies. In particular, Alice can be assumed 
to act according to some two-outcome r-round measuring co-strategy {T ,Ti} for 
Bob's input and output spaces, with outcome a G {0, 1} indicating a guess that 
Bob acted according to strategy S a . Moreover, letting C denote the event that 
Alice's guess is correct, we have 

Pr[C] = i + i(T -T 1 ,5o-5 1 ). 

Naturally, Alice maximizes the probability of a correct guess by maximizing this 
expression over all r-round measuring co-strategies {T ,Ti}. 

Of course, this guessing game is symmetric with respect to strategies and co- 
strategies. In particular, if Bob's actions 5*0, Si are co-strategies instead of strategies 
then Alice's actions {T ,Ti} must be a measuring strategy instead of a measuring 
co- strategy. The probability with which Alice correctly guesses Bob's strategy is 
still given by 

Pr[C] = l + l{T -Ti,S -Si) 

except that Alice now maximizes this probability over all r-round measuring strate- 
gies {T ,Ti}. 

With this example in mind, we propose two new norms — one that captures 
the distinguishability of strategies and one that captures the distinguishability of 
co-strategies. 



84 



Definition 5.2 (Strategy r-norm). For any Hermitian-preserving super-operator 
$ : L(Xi_ r ) ->■ L(3 ; i... r ) we define 

||$|| or = max{(T — 7\, J($)) : {T ,Ti} is a r-round measuring co-strategy} , 
|| $ ||* r = max { (So — Si,J(&)) : {S , Si} is a r-round measuring strategy} . 

Sometimes it is convenient to write || J(<3>) || or instead of ||$||or, particularly when 
J($) is an operator derived from quantum strategies. Similarly, we may sometimes 
write || J(<E>) ||* r instead of || $ ||* r . □ 

If Sq, Si are strategies for input spaces X\, . . . , X r and output spaces yi, . . . ,y r 
then it follows immediately that the maximum probability with which Alice can 
correctly distinguish So from Si is 

\ 4 1 1 ~~ $1 1 1 or 

Likewise, if So, Si are co-strategies rather than strategies then the maximum prob- 
ability with which Alice can correctly distinguish S from Si is 

1 i 1 || Q c || * 

2 ill D ~~ Nor 

It may seem superfluous to allow both strategies and co-strategies as descriptions 
for Bob's actions in this simple example, as every co-strategy may be written as a 
strategy via suitable relabelling of input and output spaces. But there is something 
to be gained by considering both the norms ||-|| r an d \\-\\l r - Later, we will show 
that these norms are dual to each other and we will use this duality to generalize 
the simple guessing game of this section. 



Both a trace norm and an operator norm 



We just argued that the norms ||-||o r and ||-||* r are to strategies and co-strategies 
as the trace norm is to states — a distance measure. 

But these new norms also admit a different interpretation. It is easy to see 
that the maximum probability over all states p with which a standard quantum 
measurement {P a } produces a given outcome a is given by ||-P a ||- (This maximum 
is achieved for p = vv* where v is an eigenvector associated with the largest eigen- 
value of P a .) This observation extends unhindered to measuring strategies and 
co-strategies. 

Proposition 5.3 (Maximum output probability from the strategy r-norm). Let 

{S a } be an r-round measuring strategy. The maximum probability with which a 
compatible r-round co-strategy could force {S a } to produce a given measurement 
outcome a is given by ||S a || or . 

Similarly, if {Tj,} is an r-round measuring co-strategy then the maximum prob- 
ability with which a compatible r-round strategy could force {T b } to produce a given 
measurement outcome b is given by \\T b \\l r . 
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Proof. The proofs of the two statements are completely symmetric, so we prove 
only the first. As each S a is positive semidefinite, the maximum in the definition of 
|| Sailor is achieved at an r-round measuring co-strategy {T ,T\} with T\ = 0. That 
is, 

|| 'S'a ||or = max{(T — T\, S a ) : {T ,Ti} is an r-round measuring co-strategy} 
= max{(T , S a ) : T is an r-round non-measuring co-strategy} 

The proposition follows from Theorem 13.11 (Interaction output probabilities). □ 

Thus, the strategy r-norm and its dual are to measuring strategies and co- 
strategies as the operator norm is to measurements — a measure of maximum output 
probability. Juxtaposing these two interpretations, we see that both the norms 
|| • || or an d || • || or ac t as both a trace norm and an operator norm in the appropriate 
contexts. 



The strategy 1-norm agrees with the diamond norm 

As suggested by the notation || • || or , this new norm agrees with the diamond norm 
on Hermitian-preserving super-operators for the case r — 1. The proof of this fact is 
a simple exercise that serves as a convenient introduction to some of the techniques 
that will be employed later in this chapter. 

Proposition 5.4 (Agreement with the diamond norm). For every Hermitian- 
preserving super- operator $ it holds that ||$|| = ll^lloi- 

Proof. The proposition is trivially true for $ = 0, so we assume $ ^ throughout. 
We also assume that $ has the form $ : L(^Y) — > L(3^). 

The proposition is a simple consequence of Theorem 13 . 1 1 1 hat is somewhat com- 
plicated by the fact that it must be proven for all Hermitian-preserving super- 
operators — not just those which represent strategies. Strictly speaking, Theorem 
13.11 applies only to measuring strategies and co-strategies and therefore cannot be 
directly applied to an arbitrary Hermitian-preserving super-operator $. In order 
to use Theorem 13.11 we first decompose $ into a linear combination of measuring 
strategy elements. 

Toward that end, we note that the Hermitian-preserving property of $ implies 
that </($) is a Hermitian operator. In particular, it has a Jordan decomposition 

J($) = R+ -R- 

where the operators R + ,R~ G H + (^ ® X) are positive semidefinite and act on 
orthogonal subspaces. Let e be a positive real number with the property that eR + 
and eR~ are both elements of some three-outcome one-round measuring strategy 
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{So, Si, S 2 } for the input space X and output space y. An easy way to accomplish 
this is to take 

1 

6 = dim(y) max{||i2+||, 
(So, Si, S 2 ) = (eR + , eR~, Ai ^ y ^ Iy®x - tR + - eR~\ . 

For any one-round measuring co-strategy {To, Ti} for the input space X and output 
space y, Theorem 13 . 1 1 tells us that the probability with which an interaction between 
{S a } and {T b } yields measurement outcomes (a, b) is given by 

Pr[(a,b)] = (T b ,S a ). 

In particular, 

Pr[(0, b)] - Pr[(l, b)] = (T b , S - Si) = e(T b , J($)>. 

Similarly, let {Q a }) be an operational description of the strategy {S a } and 
let (p, {P b }) be an operational description of the co-strategy {T b }. These objects 
take the form 

* : L(X) -> L(y ®Z) p 6 H + (X ® w) 

{Q a } C H+(Z) {P b } C H+(W) 

for some choice of spaces W and 2. Basic quantum formalism tells us that the 
probability with which an interaction between {Q a }) and (p, {Pb}) yields mea- 
surement outcomes (a, b) is given by 

Pr[(a,6)] = (Q a <g> P b , (* ® l w ) (p)>. 

Let $ ± be the super-operators with J($ ± ) = -R ± , so that $ = $+ - 
According to Definition 12.51 (New formalism for measuring strategies), the actions 
of $ ± on any X G 1>(X) are given by 

<S>+:X^±Tr z ((Q ®Iy)V(X)), 
$- :X^±Tr z ((Q 1 ®I y )*(X)). 

In particular, 

Pr[(0,6)]=e(P 6 , ($ + <S>l w ) (p)}, 
Pr[(l,6)]=e(n, ($-®l w ) (p)). 

and hence 

Pr[(0, 6)] - Pr[(l, 6)] = e(P 6 , ($ ® l w ) (p)). 
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Then by linearity we obtain 

(P - Pi, ($ ® lw) (p)> 
= i ((Pr[(0, 0)] - Pr[(l, 0)]) - (Pr[(0, 1)] - Pr[(l, 1)])) 
= (To-T 1; J($)). 

To prove the proposition, first select the co-strategy {T ,Ti} so that its opera- 
tional description (p, {P a }) achieves the maximum in the definition of the diamond 
norm. In this case, the above expression implies ||$|| < ll^lloi- For the reverse 
inequality, select a co-strategy {T , Ti} that achieves the maximum in the definition 
of ||$||oi- in this case, the above expression implies ||$|| > ll^lloi- D 

Extension to non-Hermitian-preserving super-operators? 

According to Definition 15.21 (Strategy r-norm), the norms ||$||o r an d H^Hor are 
defined only when $ is a Hermitian-preserving super-operator. Is there a natural 
extension of these norms to all super-operators? Ideally, such an extension would 
agree with Definition 15.21 on Hermitian-preserving super-operators and with the 
diamond norm when r = 1. 

What would such an extension look like? Presumably, it would require a gen- 
eralization of quantum strategies as they appear in Definitions 12.11 and 12.41 For 
example, an r-tuple (<&i, . . . , $ r ) might denote an operational representation of a 
generalized strategy if and only if each of the super-operators $j preserves trace 
norm. 

Indeed, a generalization of Theorem 13. II (Interaction output probabilities) would 
probably be required in order to reason about these generalized strategies and de- 
fine a generalized strategy r-norm. Moreover, in the next section we will see that 
several basic properties of the strategy r-norm are established via Proposition 13.81 
(Polar sets of strategies) and ultimately Theorem 13.21 (Characterization of strate- 
gies). Presumably, a proper generalization of the strategy r-norm would also re- 
quire corresponding generalizations of these two results. Essentially, much of the 
formalism developed so far in this thesis for quantum strategies would need to be 
re-derived in a more general setting. 

What use could such a generalization find in quantum information theory? In 
looking to the diamond norm for inspiration, we find few examples of its use on non- 
Hermitian-preserving super-operators in a quantum information context. Perhaps 
the most notable such use is the "maximum output fidelity" characterization of the 
diamond norm: 

Fact 5.5 (Maximum output fidelity characterization of the diamond norm). Let 
$ : L(Af) — > li(y) be an arbitrary super- operator. Let Z be a space and let A, B : 
X -> y g> Z be operators with $ : X H> Ti z (AXB*). Then 

||$ ||o = maxF(^ A (p),^ B (a)) 

p,a 
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where the super- operators ^a, '■ — > ~L(Z) are given by 

ty A :X^ Try (AX A*), 
b : X i — y Tr y (BXB*) 

and F(p, a) denotes the fidelity function on pairs of quantum states and the maxi- 
mum is taken over all quantum states p,o~ G H + (X). 

This characterization has been employed in the study of quantum interactive 
proofs [RW05J and a proof may be found in Ref . |KSV02] . Could this characteri- 
zation be generalized so as to yield an interesting quantum information theoretic 
application of the strategy r-norm to non-Hermitian-preserving super-operators? 

While an endeavor to generalize the strategy r-norm would no doubt be an 
interesting mathematical exercise, its applicability to quantum information is not 
readily apparent. In this thesis, our foray into the realm of mathematical curiosity 
of this flavor is limited to the study of the dual of the diamond norm in Section 



5.2 Distinguishing convex sets of strategies 

In this section we generalize the guessing game example from the previous sec- 
tion from a problem of distinguishing individual states, operations, or strategies to 
distinguishing convex sets of states, operations, or strategies. 

Specifically, suppose two convex sets A , A x of quantum states are fixed. Sup- 
pose that Bob arbitrarily selects p G A and pi G A x and then selects p G {po, pi} 
uniformly at random and gives Alice a quantum system prepared in state p. Alice's 
goal is to correctly guess whether p G A or p G Ai based upon the outcome of a 
measurement she conducts on p. It is clear that this problem is a generalization of 
that from the previous section, as the original problem is recovered by considering 
the singleton sets A = {po} an d Ai = {pi}. 

This problem of distinguishing convex sets of states was solved in Ref. [GW05J, 
wherein it was shown that there exists a single measurement {Po, P\} that depends 
only upon the sets A , Ai with the property that any pair p G A , pi G Ai may 
be correctly distinguished with probability at least 

1 1 

- + - mm IWo-axW^. 

Z 4 <T a £A a 

In particular, even if two distinct pairs po,Pi and p' , p' x both minimize the trace 
distance between A and K\ then both pairs may be optimally distinguished by the 
same measurement {P ,Pi}. 

What about distinguishing convex sets of quantum operations or strategies? 
Nothing was known of either problem prior to the work of the present thesis. In this 
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section, we prove that the distinguishability result for convex sets of states extends 
unhindered to operations and strategies. In particular, we prove that two convex 
sets S , Si of r- round strategies can be correctly distinguished with probability at 
least 

It then follows trivially that two convex sets T , T x of r-round co-strategies can be 
correctly distinguished with probability at least 

1 1 I.™ nn „* 

— I — mm T n — Ti L . 

2 4r n£ T n 11 1|l<>r 

As a special case, it holds that two convex sets <3?o, &i of quantum operations can 
be distinguished with probability at least 

- + - min II $ - $i |L • 

2 4**6*." 1,0 



Properties of the strategy r-norm 

Our proof of the distinguishability of convex sets of strategies is essentially a copy 
of the proof appearing in Ref. |GW05] with states and measurements replaced by 
strategies and co-strategies and the trace and operator norms replaced with the 
strategy r-norm and its dual. 

To ensure correctness of the new proof, we must identify the relevant properties 
of the trace and operator norms employed in Ref. |GW05J and then establish suit- 
able analogues of those properties for the new norms || • || or and || • ||* r . The relevant 
properties of the trace and operator norms are: 

1. The trace norm and operator norm are dual to each other, meaning that 

||X|| T r = max \{Y,X)l 

\\Y\\<1 

\\X\\ = max 1(7,1)1 

\\Y\\t,<1 

for all operators X. 

2. If X is Hermitian then 

\\X\\ < 1 \X\ r< /. 
Here \X\=X + + X~ where X = X + - X' is a Jordan decomposition of X. 

Property |2] is really just a circuitous way of saying that a Hermitian operator has 
operator norm at most 1 if and only if all its eigenvalues are no larger than 1 in 
absolute value. Compared to the duality of the trace and operator norms (property 
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[T]), this observation is not deep or significant in and of itself. It is only phrased as 
such so as to highlight the forthcoming generalization to the strategy r-norm and 
its dual. 

Our generalization of property [1] states that the norms || • || or and \\-\\l r are dual 
to each other. Because our proof of this fact relies upon the generalization of 
property El we first establish the latter. 

Unit ball of the strategy r-norms 

Proposition 5.6 (Unit ball of the strategy r-norms). For any Hermitian-preserving 
super- operator $ : L(Ai_ r ) — > L(3^i... r ) it holds that 

||$|| or < l | J($)| -« S 

for some r -round non-measuring strategy S for input spaces X x , . . . , X r and output 
spaces yi, . . . , y r . Similarly, 

WHlr < 1 \ J{$)\ d T 

for some r -round non-measuring co-strategy T for input spaces X\, . . . , X T and out- 
put spaces y±, . . . ,y r - 

Proposition 15.61 follows immediately from the following two lemmas. 

For any Hermitian-preserving super- operator $ : h(X 1 . r ) — > L(3^ 1 ... r ) 

(| J(3>) |, T) < 1 for every r -round non-measuring co-strategy T, 
=^> (| J($)|, S) < 1 for every r -round non-measuring strategy S. 

For each positive semidefinite operator X E tt + (yi... r ®Xi... r ) it holds 

{X,T) < 1 for every r-round non-measuring co-strategy T 
X S for some r-round non-measuring strategy S, 

(X, S) < 1 for every r-round non-measuring strategy S 
X ^<T for some r-round non-measuring co-strategy T. 

Lemma is an immediate corollary of Proposition (Polar sets of strategies) , 
which was proven in Section 13.3.11 Hence, we do not prove Lemma 15.81 here — it is 
restated only for ease of reference without the polarity notation. It remains only 
to prove Lemma 15. 71 



Lemma 5.7. 

it holds that 

ll^llor < 1 < 

\\nir<i < 

Lemma 5.8. 

that 
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Proof of Lemma \5. 7| and hence also of Proposition 15.61 The proofs of the two de- 



sired equivalences are completely symmetric, so we prove only the first. As $ is 
Hermitian-preserving, it holds that </($) is a Hermitian operator. As such, it has 
a Jordan decomposition </($) = R + — R~ with | | = R + + R~. 

We first prove the easier implication. Suppose (|J($)|,T) < 1 for all co- 
strategies T and choose any measuring co-strategy {T ,Ti}. We must show that 
(J($), T — Ti) < 1. As {T , T{\ is a measuring co-strategy, it holds that T + Ti is 
a nonmeasuring co-strategy. Taking T = T + Ti , we get 

1 > (R + + R~, T + T x ) > (R+ -R',T - T x ) 

as desired. 

For the other direction, suppose ||$||<>r < 1 an d choose any co-strategy T. We 
must show that (| J($) |, T) < 1. Our goal is to decompose T = T + Ti in such a 
way that {T ,Ti} is a measuring co-strategy with (R + ,T 1 ) = (R~,T ) = 0. Such a 
choice of T ,Ti ensures that 

(R + - R~,T - T x ) = (R + + R~,T + Ti). 

The lemma is then established by noting that the left side of this expression is at 
most 1 and the right side of this expression equals (| J($)|,T). 

It remains to choose the appropriate T ,Ti. Letting n + denote the projection 
onto the support of R + , we choose 

T = n + Tn + , 

Ti = T-T . 

That {R + , Ti) = (R~ , T ) = follows from the fact that R + and R~ have orthogonal 
support. Finally, it is easy to verify that {T ,Ti} denotes a valid measuring co- 
strategy: as T is a co-strategy, so too is the sum T + Ti = T. As T is positive 
semidefinite, so too are T ,Ti. □ 



Duality of the strategy r-norms 

We are now ready to prove that the norms || ■ ||<> r and || • ||* r are dual to each other. 

Proposition 5.9 (Duality of the strategy r-norms). The norms ||-||<>r one? \\-\\l r 
are dual to each other. In other words, for any Hermitian-preserving super- operator 
$ : L(Ai... r ) -)■ L(;Vi...r) it holds that 

II^IL. = max (\l>, $), 

ll*IISr<l 

\\®\\tr= max 

* or<l 
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Proof. The proofs of the two desired equalities are completely symmetric, so we 
prove only the first. We begin by proving 

11$ Hot- < m a x 

ll*IISr<l 

Let {T ,Ti} be an r-round measuring co-strategy attaining the maximum in the 
definition of ||$|| r, so that 

\m or = (T -T 1 ,j(®)). 

The desired inequality follows from the claim that ||T — Ti||* r < 1. To verify 
this claim, we note that any r-round measuring strategy {So, Si} attaining the 
maximum in the definition of ||T — 7\ ||* r has 

||T - T x ||: r = (So - S 1; T - T x ) < (S + S u T + = I. 

That the final inner product equals one follows immediately from Theorem 13.11 
(Interaction output probabilities) and the observation that So + Si may be viewed 
as a one-outcome measuring strategy and T + T\ may be viewed as a one-outcome 
measuring co-strategy. 

For the reverse inequality, choose a Hermitian-preserving super-operator \1/ with 
ll^llor — 1 that maximizes the inner product Proposition 15.61 tells us that 

I J{^) I T for some r-round non-measuring co-strategy T. Let J(^f) = R + — R~ 
be the Jordan decomposition of J(^) and let {T ,Ti} be the r-round measuring 
co-strategy given by 

T = R + + ±(T-\JW\), 
T l = R- + ±(T-\J(*)\). 

Then 

(^,$) = (To-T 1 ,J($))<||$|| or 
as desired. □ 



Distinguishability of convex sets of strategies 

As mentioned earlier, our proof of the distinguishability of convex sets of strategies 
closely resembles the proof of the distinguishability of convex sets of states ap- 
pearing in Ref. [GW05]. Now that we have identified and established the relevant 
properties of the norm || • || or and its dual || • ||* r , we are ready to translate the proof 
of Ref. |GW05j onto the domain of quantum strategies. 

Theorem 5.10 (Distinguishability of convex sets of strategies). Let So, Si C 
H + (3^i... r <8> Xi r ) be nonempty convex sets of r-round strategies. There exists an 
r-round measuring co-strategy {T ,Ti} with the property that 

(T - Ti, S - Si) > mm \\R - R t || or 
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for all choices of Sq £ Sq and Si £ Si. A similar statement holds in terms of the 
dual norm \\ ■ ||* r for convex sets of co-strategies. 

Proof. The proof for co-strategies is completely symmetric to the proof for strate- 
gies, so we only address strategies here. Let d denote the minimum distance between 
So and Si as stated in the theorem. If d = then the theorem is satisfied by the 
trivial r-round measuring co-strategy corresponding to a random coin flip. (For this 
trivial co-strategy, both T and T\ are equal to the identity divided by 2 dim(A'i ... r ).) 
For the remainder of this proof, we shall restrict our attention to the case d > 0. 

Define 

S = So — Si = {So — Si : So £ So, Si £ Si} 

and let 

B = {B £ H(^... r ® X x „, r ) : \\B\\„ < d} 

denote the open ball of radius d with respect to the || ■ || or norm. The sets S and B 
are nonempty disjoint sets of Hermitian operators, both are convex, and B is open. 
By the Separation Theorem (Fact ll.6p . there exists a Hermitian operator H and a 
scalar a such that 

(H, S)>a> (H, B) 

for all S £ S and B £ B. 

For every choice of B £ B we have —B £ B as well, from which it follows that 
| (H, B) | < a for all B £ B and hence a > 0. Moreover, as B is the open ball of 
radius d in the norm || • || or , it follows from Proposition 15.91 (Duality of the strategy 
r-norms) that 

||i?||or < Ot/d. 

Now let H = -H be the normalization of H with II H II* < 1 and let H = H + — H~ 

a ^ n nor — 

be the Jordan decomposition of H. By Proposition 15.61 (Unit ball of the strategy 
r-norms) we have \H\ ^ T for some co-strategy T. Let {T ,Ti} be the measuring 
co-strategy given by 

t = h + + ~(t-\h\), 

Ti = H- + ~(T-\H\). 

It remains only to verify that {To,Ti} has the desired properties: for every choice 
of So £ So and Si £ Si we have 

(T - T x , So - Si) = (H, So - Si) = -(H, S - Si) > d 

a 

as desired. □ 

The claimed result regarding the distinguishability of convex sets of strategies 
now follows immediately. To recap, let Sq, Si be convex sets of strategies and let 
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{T ,Ti} denote the measuring co-strategy from Theorem 15.101 that distinguishes 
elements in S from elements in Si. Suppose Bob selects So G S and Si G Si 
arbitrarily and then selects S G {So, Si} uniformly at random. As derived in 
Section l5\Tj if Alice acts according to {To,Ti} then the probability with which she 
correctly guesses whether S G So or S G Si is given by 

\ + I (To - Tl ' So ~ Sl) * \ + \ II - Ri \L 

as desired. 



5.3 The dual of the diamond norm 

In Proposition 15.41 we established that the strategy 1-norm ||$||<>i agrees with the 
diamond norm ||$||<> on Hermitian-preserving super-operators <3>. Can the same be 
said of the duals of these norms? In this section we answer that question in the 
affirmative. In order to do so, we also establish several basic facts concerning the 
dual of the diamond norm. While none of these facts are surprising, the only proofs 
we can offer are nontrivial and possibly interesting in their own right. Thus, in this 
section we take a "detour" from the strategy r-norm in order to study the dual of 
the diamond norm, returning only at the very end to answer this section's opening 
question. 

Definition 5.11 (Dual of the diamond norm). As with any norm, the dual \ \ ■ ||* of 
the diamond norm ||-|| is defined for every super-operator $ as 

|| $11* = max | (*,$)! • 

|[*l|o =1 

□ 

That the dual of the dual of the diamond norm equals the diamond norm follows 
from the Duality Theorem, a proof of which can be found in Horn and Johnson 
|HJ85j . In other words, it holds that 

11$ II** = 11$ II = max |(\Er <&)|. 

||*||S=i 

While much is known of the diamond norm, its dual has never been studied. In 
this section, we establish the following basic facts about this norm: 

1. If $ is completely positive then the maximum in the definition of ||$||*, is 
achieved by a completely positive and trace-preserving super-operator. 

2. If $ is Hermitian-preserving then the maximum in the definition of is 
achieved by a Hermitian-preserving super-operator. 
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3. For each of the two maxima 



||$||*= max |(^,$)|, ||<&L= max |(^,$)| 
||*|[o=l ' ll*IIS=i 

there exist super-operators $ such that the maximum is not attained by any 
Hermitian-preserving super-operator Moreover, there exist Hermitian- 
preserving super-operators $ such that the maximum is not attained by any 
completely positive super-operator \1>. 

4. If $ is Hermitian-preserving then \\$\\% = H^Hoi- 



Useful lemmas involving the diamond norm 

We begin with three technical lemmas, two of which establish facts about the 
diamond norm. The first lemma follows immediately from Refs. |RW05t IAHW00] . 
We provide an alternate proof for completeness. 

Lemma 5.12. For any completely positive super- operator $ it holds that ||$||tt — 
||$||o. Moreover, the maximum in the definition of \\^\\tt is achieved by a positive 
semidefinite operator. 

Proof. It is clear that ||<&||© > ||3>||n-, so let us concentrate only on the reverse 
inequality. Suppose $ has the form $ : L(X) — > h(y). As $ is completely positive, 
there exists a space W and a density operator p G H + (X g) W) with the property 
that 

|| $ Ho = || ($ <g> l w ) (p) || Tr = Tr (($ g> l w ) (p)) . 

By convexity, we may assume that p is a pure state — that is, p = uu* for some unit 
vector u G X ® W. For any orthonormal basis {ei, . . . , edim(vv)} of W we may write 

dim(W) 

i=i 

for some choice of unit vectors x±, . . . , £dim(w) £ X (not necessarily orthogonal) and 
nonnegative real numbers qi, . . . , <?dim(w) that sum to one. Then 

dim(W) dim(W) 

II $ llo = J2 Vm^ (Hxitf) ® e t e*) = J2 * Tr ( $ (^<)) = Tr 

i,j=l i=l 

for o- = ^fiT (vv) 9^^*- n 

For any operator A : X — > y of rank r it follows from the Singular Value Theo- 
rem (Section |1.2. ip that it is possible to choose vectors ui, . . . ,u r G y, V\, . . . , v r G 
X such that 



i=l 
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Given such a choice of vectors, we define the positive semidefinite operators A L e 
H+QO, A R E H+(X) by 

r r 

A L = Y^ u i u i > = • 

i=l i=l 

If A is Hermitian then it is clear that we may take = A R — \A\. As a conse- 
quence, if A is positive semidefinite then we may take A-^ = A R = A. The following 
simple lemma is a special case of Ref . |Wat05t Lemma 2] . 

Lemma 5.13. For any operators A,B:X^-y and any decompositions A\ J ,A R 
and -Br of those operators it holds that 

\(A,B)\ 2 < (A h ,B L ) ■ (A R ,B R ) . 



Proof. Let 

r q 

A = mv *, B = WjX* 

i=l j=l 

be decompositions of A, B that yield Al, A r and B^, B R . Then 



r q 



i=l j=l 



r q 



i=l 3=1 



< 



r q 



\ i=l 3=1 



\ 



r g 



^y^\{x3,vi)\ 

i=l 3=1 



r q 



\ »=i i=i 



UiU*,WjW*) 



\ 



r q 



i=i j=i 



= y/(A L ,B L )- y/(A R ,B R ) 
where the inequality follows from Cauchy-Schwarz. 



□ 



For any super-operator $ and any decomposition J($)l, J($)r of </($) we let 
$ L ,$ R denote the super-operators with J($ L ) = J(®)l and J($ R ) = J(<E>)r. As 
J($l), ^(^r) are positive semidefinite, it holds that $l, $r are completely positive. 

Lemma 5.14. For any super- operator $ : L(^f) — >■ L(^) t/iere exists a decomposi- 
tion $ L , $ R o/$ 

1 1 * Mo = II$lIL = II^rIIo- 

Proof. It was noted in the conclusion of Ref. [Wat05j that 



l$ll! = inf|||$ 



L || Tr ' 



^rIItJ 
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where the infimum is taken over all decompositions $l, $r of $. The existence of 
a fixed pair $r) that achieve this infimum may be argued as in Ref. |KSV02j . 
By rescaling, we may assume that H^lIItt — II^rIItd from which it follows that 

||$||o = ||^l||tt = ||$R||Tr- 
The lemma then follows from Lemma 15.121 □ 



Achieving the maximum 

We are now ready to exhibit two theorems that establish two of the claims from 
the beginning of this section. 

For any Hermitian-preserving super-operator $, we let |$| denote the com- 
pletely positive super-operator with J(|$|) = |J($)|. Just as with operators, there 
is a decomposition $l, $r of $ with <£>l = $r = |$|- Moreover, if $ is completely 
positive then we may take $l = $r = $■ 

Theorem 5.15 (Achieving the maximum for completely positive super-operators). 
For any Hermitian-preserving super- operator $ it holds that 

II $11* < II I $ I II* 

II Y Ho — II I Y I Ho- 

Moreover, the maximum in the definition of |||$|||*. achieved by a completely 
positive and trace-preserving super- operator. 

As a consequence, if $ is completely positive then the maximum in the definition 
of ||$||*, is achieved by a completely positive and trace-preserving super- operator. 

Proof. First we show that the maximum is attained by a completely positive super- 
operator — the trace-preserving property will be established later. 

Let ^ be any super-operator with || ^ || = 1 achieving the maximum in the 
definition of ||$||*>, so that ||$||*, = | $) |. By Lemma [5 . 1 41 1 here exists a decom- 
position ^r of \& with 

ll^llo = II^lIIo = II^rIIo = l. 

Moreover, ty L an d ^r are completely positive. 

As $ is Hermitian-preserving, there is a decomposition $l, $r of $ with $l — 
$r = | $ | . By Lemma 15.131 we have 

ii$ii: = k*,$)| < y/(^ L ,\nW(^RAn 

< max{(S, |$|) : — 1 and H is completely positive} . 

Thus, || $||* < || |$| ||* and the maximum in the definition of |||$| ||* is attained by 
a completely positive super-operator 5. 

For the trace-preserving property, we note that 1 = ||H|| = ||H||oi- Then by 
Proposition 15.61 and the complete positivity of H it holds that J(H) ^ J(^') for 
some completely positive and trace-preserving super-operator H' with ||H'|| = 1. 
The desired result follows from the observation that (E/, |$|) > (S, |$|). □ 
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Theorem 5.16 (Achieving the maximum for Hermitian-preserving super-opera- 
tors). For any Hermitian-preserving super- operator $ the maximum in the defini- 
tion of is achieved by a Hermitian-preserving super- operator. 

Proof. Let J($) = T + — T~ be a Jordan decomposition of </($), so that = 
T + + T~ . By Theorem 15.151 it holds that ||$||£ < |||^|||o an d the maximum in 
the definition of || \ is achieved by a completely positive and trace-preserving 
super-operator 

Let n 1 * 1 denote the projections onto the support of and let H denote the 
Hermitian-preserving super-operator with 

j(H) = n+j(^)n+ - n-j(*)n _ . 

It is easily verified that 

(*,|$|> = (H,$>. 

The left side of this equality is || |$| ||*, which we know to be at least as large as 
|| $||*. Hence, the desired result will follow once we establish that the Hermitian- 
preserving super-operator H has ||5|| < 1. 

Toward that end, we note that 

I j(s) | = n+ j(^)n+ + n~ j(*)n _ ■< 

As $ is completely positive and trace-preserving, it holds that J(^) denotes a one- 
round non-measuring strategy. Thus, by Proposition 15.61 it holds that || S ||oa — 1- 
The theorem follows from Proposition I5.4[ which tells us that ||H||o= ||S||«i. □ 

Not achieving the maximum 

We now show that Theorems 15.151 and 15.161 cannot be extended beyond completely 
positive and Hermitian-preserving super-operators, respectively. Our counterexam- 
ples rely upon the following lemma. 

Lemma 5.17 (Diamond norm for 1-dimensional spaces). The following hold for 
any super- operator $ : L(^) — » L(3/): 

1. Suppose dim(A') = 1 and let A G L(3^) be the operator with $ : a y ctA. It 
holds that ||$|| = ||$||tt = MHtt- 

2. Suppose dim(^) = 1 and let A G L(Af) be the operator with $ : X i— >• (A, X) . 
It holds that ||$|| = ||3>||tt = \\A\\. 

Proof. Item [1] is a simple consequence of the fact that the auxiliary space W in the 
definition of the diamond norm can be assumed to have dimension no larger than 
dim(A'). This fact immediately implies || $ || = || $ ||x r - It follows immediately from 
the definition of the super-operator trace norm that H^Hty = II^Hty- 
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For item [2j choose a space W and vectors u, v G X <g> W with 

||$||o = ||($® lw) (WU*) Ik ■ 

Let U € L(VV) be a unitary such that 

|| ($ <8) l w ) (w*) Ik = Tr (17 ($ <8) l w ) (w*)) 
and let w G <8> W be the vector given by w = (Ix <8> i7)w, so that 

|| ($ <8) lw) (uw*) || Tr = Tr (($ <g> l w ) (uw*)) . 
As in the proof of Lemma f5.12| choose an orthonormal basis {ej} of W and write 

dim(W) dim(W) 



1=1 1=1 



for some choice of unit vectors {u>j}, {fj} C Af and probability distributions {qi}, {Pi}- 
Then 

dim(W) dim(W) 

Tr (($ ® l w ) (m*)) = ^ vW* (A ^ II ^11 vW^<MH 

i=l i=l 

where the final inequality is Cauchy-Schwarz. Equality is obtained for real numbers 
Pi = Qx — 1 arid unit vectors Wi,v\ maximizing the inner product (A,wiV\). We 
have thus established ||$||© — || A ||. As || <&(wiv*) || xr = 1 1 ^4 1 1 , we also have ||$||© = 

ll$lk □ 

Proposition 5.18 (Theorems 15.151 and 15.161 do not extend). For each of the two 
maxima 

II <E>||*= max |(*,$)|, ||$||o= max | 
ll*llo=i' v [|*||?=i 

there exist super- operators $ such that the maximum is not attained by any Hermitian- 
preserving super- operator 

Moreover, there exist Hermitian-preserving super- operators $ such that the max- 
imum is not attained by any completely positive super- operator 

Proof. The counterexamples presented here are all achieved via reduction from the 
diamond norm and its dual to the trace norm and its dual (the operator norm). 

Let X be a space of dimension one, so that for each super-operator $ : L(Af) — > 
li(y) there is an operator A £ L(3^) with $ : a t— > aA. For any f :«4 aB it is 
easily verified that 

\(*,$)\ = \(B,A)\. 

Moreover, it is clear that ^ is Hermitian-preserving if and only if B is Hermitian 
and that ^ is completely positive if and only if B is positive semidefinite. By 
Lemma 15.171 it holds that 

|| $||*.= max |(tf,$>| = max \{B, A) \ = \\A\\. (5.1) 

||*lk=i II-B||tt=i 
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We now exhibit an operator A such that the maximum is not achieved by any 
Hermitian operator B. Consider the operator 



A 

The quantity 



1 1 
1 



max I (B, A) I = max luM/ul 
|s||tt=i, NI=i 



B Hermitian 

is known as the numerical radius g(A) of A. It is easy to compute g(A) = |, which 
is strictly smaller than ||A|| = 1+ 2 V ^ ■ 

Next, let y be a space of dimension one, so that for each super-operator $ : 
L(X) ->■ L(y) there is an operator A e L(y) with $ : X (A, X). For any 
$:!!-)■ (B, X) it is easily verified that 

\(*,<f>)\ = \(B,A)\. 

Moreover, it is clear that \1/ is Hermit ian-preserving if and only if B is Hermitian 
and that \1/ is completely positive if and only if B is positive semidefinite. By 
Lemma 15.171 it holds that 

||$||*= max = max \(B, A)\ = ||A||tv. (5.2) 

11*110=1 \\B\\ = l 

Consider the operator 

A = U -U 1 

where n , Hi € H + (y) are nonzero orthogonal projections. It is easy to verify that 
the maximum is not achieved by any positive semidefinite B. 

The proposition is now proved for the maximum = max||^,|| <>=1 . 

The proof for the other maximum follows along similar lines. □ 



The dual of the strategy 1-norm agrees with the dual of the diamond 
norm 

Finally, we have what we need to establish agreement between and ||-||* for 

Hermitian-preserving super-operators. 

Proposition 5.19 (Agreement with the dual of the diamond norm). For every 
Hermitian-preserving super- operator $ it holds that = H^Hoi- 

Proof. We have 

|| $ ||* = max {| $) | : \\^f || = 1 and \1/ is Hermitian-preserving} 

= max {| $) | : \\^> = 1 and \1/ is Hermitian-preserving} 

= 11*11*-, 
II ^ I lol • 

The first equality is Theorem I5.16[ the second Proposition 15. 4[ and the third Propo- 
sition EE □ 
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Part II 

Local Operations with Shared 
Entanglement 
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Chapter 6 

Introduction to Local Operations 



In Part[TT]of this thesis we are interested in various classes of "local" quantum oper- 
ations, which are operations that can be jointly implemented by two or more parties 
who act on distinct portions of the input system and who do not communicate once 
they receive their portions of the input. 

In this introductory chapter for Part [III we provide formal definitions and im- 
mediate observations for three such classes: local operations, local operations with 
shared randomness, and local operations with shared entanglement. We also in- 
troduce convenient shorthand notations for separable operators and for the vector 
space spanned by the local operations — objects which are of fundamental impor- 
tance to the work in this part of the thesis. 

Local operations and the space that they span 

The simplest examples of quantum operations that can be implemented jointly by 
multiple parties without communication are the product operations, which consist 
of several completely independent quantum operations juxtaposed and viewed as a 
larger single operation. 

Definition 6.1 (Local operation). A quantum operation A : L(Ai... m ) — > L(3^i... m ) 
is m-party local with respect to the input partition X\, . . . , X m and output partition 
yi, . . . , y m if it can be written as a product operation of the form 

A = ^1 g> • • • ® ^ m 

where each ^ : L(A'j) — > L(3^) is a quantum operation. Typically, the partition of 
the input and output spaces is implicit and clear from the context. □ 

The vector space of super-operators spanned by the local operations is of paramount 
interest in Part [III of this thesis. As such, we introduce a convenient shorthand no- 
tation for this space. 
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Toward that end, recall that a super-operator : L(A£) — > L(3^) denotes a 
quantum operation if and only if is completely positive and trace-preserving. 
In terms of Choi-Jamiolkowski representations, the trace-preserving property of 
is characterized by the condition Tr^( J(^i)) = Ix v The set of all operators X 
obeying the inhomogeneous linear condition Try^X) = Ix i is not a vector space, 
but this set is easily extended to a unique smallest vector space by including its 
closure under multiplication by real scalars. 

Definition 6.2 (Shorthand notation for the space spanned by local operations). 
For complex Euclidean spaces , , let 

Qi = {X G H(3^j <g) Xi) : Tr yi (X) = XI Xi for some A G R} 

denote the subspace of the real vector space H(3^j ® Xi) of Hermitian operators X 
of the form X = J(^) for which \1/ : ~L{Xi) — > L(3^) is a trace-preserving super- 
operator, or a scalar multiple thereof. (Throughout this thesis, the spaces Xi,y>i 
are implicit whenever the notation Qj is used.) 

Let Xx., . . . , X m and y±, . . . , y m be complex Euclidean spaces. Employing our 
shorthand notation for Kronecker products, the subspace Qi... m of H(3^i... m ® ^ L .. m ) 
spanned by the m-party local operations is given by 

Qi...m = span {Xi <g> • • • <g> X m : X { G Qj} . 

□ 

By the end of Part [III we will see that the space Qi... m contains not only all the 
local operations, but also the local operations with shared randomness and with 
shared entanglement, as well as an even broader class of local quantum operations 
called "no-signaling" operations. Moreover, in Chapter[in]we will also see a converse 
result — that any quantum operation whose Choi-Jamiolkowski representation lies 
inside Qi... m is necessarily a no-signaling operation. 

Local operations with shared randomness, separable operators 

Local (product) operations are not the only quantum operations admitted by our 
model. In particular, there is nothing to stop the parties from meeting ahead of 
time so as to prepare shared resources that might allow them to correlate their 
separate quantum operations. 

Consider, for example, a convex combination YljPj-^-j °f ^-party local opera- 
tions Aj. Such a quantum operation is legal in our model because it can be imple- 
mented by m parties who share prior knowledge of an integer j sampled according 
to the probability distribution pj. In this case, the shared resource is randomness. 

Definition 6.3 (Local operation with shared randomness (LOSR)). A quantum 
operation A : L(A' 1 m ) — > L(3^i... m ) is a m-party LOSR operation if it can be written 
as a convex combination of m-party local operations. □ 
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As a convex combination of products of positive semidefmite operators, the 
Choi-Jamiolkowski representation of a LOSR operation belongs to a broader class 
of operators called "separable" operators. 

Definition 6.4 (Separable operator). Let Si, ... , S m be arbitrary spaces of Hermi- 
tian operators. An element X of the product space Si... m is said to be (Si; . . . ; S m )- 
separable if X can be written as a convex combination of product operators of 
the form P\ ® ■ ■ ■ ® P m where each Pi G Sf is positive semidefmite. The set of 
(Si; . . . ; S m )-separable operators forms a cone inside (Si... m ) . □ 

Using this terminology, Definition 16.31 states that a quantum operation A is a 
LOSR operation if and only if J (A) is a (Qi; . . . ; Q m )-separable operator. 

Another important example of separable operators are the separable quantum 
states. A state p G H + (A' L .. m ) is called separable if p can be written as a convex 
combination of product states of the form <j\ <S> ■ ■ ■ <8> o m where each <7j G H + (Xi) is 
a density operator. In other words, p denotes a separable state if and only if p is a 
(H(Ai); . . . ; H(A' m ))-separable operator with trace equal to one. (Quantum states 
that are not separable are called entangled.) 



Local operations with shared entanglement 

LOSR operations are not the only quantum operations that can be implemented 
locally without communication. In the most general case, the parties could each 
hold a portion of some distinguished quantum state a; each party produces his 
output by applying some quantum operation to his portions of the input system 
and a. In this case, the shared resource is a. 

Definition 6.5 (Local operation with shared entanglement (LOSE)). A quantum 
operation A : L(Ai TO ) — > L(3^i... m ) is a m-party LOSE operation with finite en- 
tanglement if there exist spaces Si, . . . ,8 m , a quantum state a G H + (£i... m ), and 
quantum operations : L(Xi ® Si) — > L(3^) for each i — 1, . . . , m such that 

This arrangement is depicted for the two-party case in Figure 16.11 

The operation A is a finitely approximable m-party LOSE operation if it lies 
in the closure of the set of m-party LOSE operations with finite entanglement. 
The term "LOSE operation" is used to refer to any finitely approximable LOSE 
operation; the restriction to finite entanglement is made explicit whenever it is 
required. □ 
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Figure 6.1: A two-party local quantum operation A with shared entanglement. The 
local operations are represented by \l/2; the shared entanglement by a. 



Finite and infinite shared entanglement 

The need to distinguish between LOSE operations with finite entanglement and 
finitely approximable LOSE operations arises from the fascinating fact that there 
exist LOSE operations that cannot be implemented with any finite amount of shared 
entanglement, yet can be approximated to arbitrary precision by LOSE operations 
with finite entanglement [LTW08J. 

Specifically, there exists an infinite sequence A^, A^, ... of LOSE operations 
with the property that the dimension of the space m associated with the shared 
state of A^ is ever increasing with i. Moreover, this sequence is known to converge 
to a quantum operation that is not a LOSE operation with finite entanglement. 

An analytic consequence of this fact is that the set of LOSE operations with 
finite entanglement is not a closed set. Fortunately, the work of this thesis is 
unhindered by a more encompassing notion of LOSE operation that includes the 
closure of that set. 



Equivalence of shared randomness and shared separable states 

The following straightforward but tedious proposition asserts that a LOSR opera- 
tion is merely a LOSE operation for which the shared state is m-partite separable. 
It establishes that, as shared resources, a quantum state differs from randomness 
only when the state in question is entangled among the different parties. 

Also established by this proposition is an explicit bound on the dimension of 
the shared state as a function of the dimensions of the input and output spaces. 
Thus, while there exist LOSE operations that cannot be implemented with a finite 
shared state, every LOSR operation can be implemented with a finite shared state 
whose size scales favorably in the size of the input and output states. 
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Proposition 6.6 (Equivalence of shared randomness and shared separable states). 
A quantum operation A : L(Af 1 m ) — > L(3^i... m ) an m-party LOSR operation if 
and only if there exist 

(i) spaces £\, . . . , S m of dimension d = dim (Qi... m ) , 
(ii) a (H(£i); . . . ; H(£ m )) -separable state o G H + (£i... m ) , and 
(Hi) quantum operations : ~L{Xi (g) Si) — > L(3^j) 

suc/i i/iai A:l4 (^ L .. m )(X <g> cr). 

Proof. Let a be a (H(£x); . . . ; H(£ m ))-separable state and let \&j : L(X{ <g) £j) — >■ 
L(3^i) be quantum operations such that A : X \-> (^i... m )(X <g> a). Let 



be a decomposition of a into a convex combination of product states, where each 
(Tjj G H + (£j). For each i and j define a quantum operation 



Conversely, suppose that A may be decomposed into a convex combination of 
product quantum operations as above. By Caratheodory's Theorem (Fact ll.4| ). this 
sum may be assumed to have no more than d terms. Let Si, . . . , S m be complex Eu- 
clidean spaces of dimension d and let p^i, . . . , G H + (£j) be mutually orthogonal 
pure states for each i. Let 




3 



: L(Xi) -> L{y t ) : X ^ ^(X ® try) 



and observe that 




as desired. 



d 




be a (H(£i); . . . ; 



H(^ m ))-separable state, let 



a 



be quantum operations, and observe that A:l4 (^i...™) (X £g> cr). 



□ 
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Convexity of local operations with shared entanglement 

It is not difficult to see that the set of local operations is not a convex set. By 
definition, the set of LOSR operations is convex. That the set of LOSE operations 
with finite entanglement is also convex follows from a simple argument that is 
similar in principle to that of Proposition 16.61 

Proposition 6.7 (Convexity of LOSE operations). The set of m-party LOSE op- 
erations with finite entanglement is convex. As a consequence, the set of finitely 
approximable m-party LOSE operations is also convex. 

Proof. Let A, A' : L(A"i... m ) — > L(3^i... m ) be LOSE operations with finite entangle- 
ment. Choose spaces Si, ... , S m of large enough dimension so that there exist states 
a, o' G H + (£i... m ) and quantum operations ^\ : L(Ai £g> Si) — > L(3^) such that 

A : X H- (*i... m )0X:<8>t7), 

Let J 7 !, . . . , T m be two-dimensional spaces, let pi, p\ G Ti be orthogonal pure states 
for each i, and let 

$i : L{Xi ® Si <g> JFi) LCVi) 

: X ® E ® F \-t (F, ■ %(X ®E) + (F,fy ■ %{X ® £?) 

be quantum operations. For positive real numbers a, a' that sum to one, let 

£ = a <T ® pi... m + oV <g) p' x m 

be a state in H + (£ L .. m <g> J-"i... TO ). It is easy to verify that 

aA + a'A' : X ^ ($ L .. m )(X ® £), 

implying that the convex combination aA + a' A' is also a LOSE operation with 
finite entanglement. 

That the set of finitely approximable LOSE operations is convex follows imme- 
diately from the fact that this set is the closure of the set of LOSE operations with 
finite entanglement, which we just showed to be convex. □ 
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Chapter 7 



Ball Around the Completely 
Noisy Channel 



In this chapter we show that any quantum operation A : L(A\_ m ) — > L(3^i... m ) for 
which J(A) lies in the product space Qi... m and close enough to a distinguished 
"completely noisy" quantum operation A must necessarily be a LOSR operation. 
In other words, there is a ball of LOSR operations surrounding A. 

For each input space X and output space y, the completely noisy channel A : 
L(X) — >■ L(y) is the unique quantum operation defined by 

dim(^) 

The quantum state dil Ay) ly is known as the completely mixed state of the system 
associated with y. Intuitively, this state denotes complete noise of the underlying 
system — it represents a uniform classical distribution over each of the dim(^) levels 
in the system. Thus, the completely noisy channel is the quantum operation that 
always produces complete noise as output, regardless of the input. 

The reason for interest in the completely noisy channel is that it is the unique 
super-operator whose Choi-Jamiolkowski representation equals the identity. More 
specifically, the completely noisy channel A : — > L(y) has 

J(A) = d^y w 

It is convenient for us to temporarily ignore the scalar multiple and deal directly 
with the unnormalized version A of A with 

J(A) = Iy 9X . 

The existence of a ball of LOSR operations around the completely noisy channel 
is established by proving that every operator in Qi... m and close enough to the 
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identity must be a (Q x ; . . . ; Q m )-separable operator. Indeed, this fact is shown to 
hold not only for the specific choice Qi, . . . , Q m of subspaces, but for every choice 
Si, ... , S m of subspaces that contain the identity. 

Choosing Si, ... , S m to be full spaces of Hermitian operators yields an alter- 
nate (and simpler) proof of the existence of a ball of separable quantum states 
surrounding the completely mixed state and, consequently, of the NP-completeness 
of separability testing for quantum states. However, the ball of separable states im- 
plied by the present work is not as large as that exhibited by Gurvits and Barnum 
[GB02llGB03j . 

The technical results we require are proven in Section I7TT1 as is a new bound for 
norms of super-operators. The application of these results to establish the existence 
of the ball of LOSR operations is provided in Section [7T2l along with some discussion 
of the details of this ball. 



7.1 General results on separable operators 

Due to the general nature of the results in this chapter, discussion in the present 
section is abstract — applications to quantum information are deferred until Section 
17.21 The results presented herein were inspired by Chapter 2 of Bhatia [Bha07j. 

Hermitian subspaces generated by separable cones 

Let S be any subspace of Hermitian operators that contains the identity. The 
cone S + always generates S, meaning that each element of S may be written as a 
difference of two elements of S + . As proof, choose any IeS and let 

x± _ \\X\\I±X 
2 

It is clear that X = X + — X~ and that X ± G S + (using the fact that I G S). 
Moreover, it holds that \\X || < ||X|| for this particular choice of X ± . 

In light of this observation, one might wonder whether it could be extended in 
product spaces to separable operators. In particular, do the (Si; . . . ; S m )-separable 
operators generate the product space Si... m ? If so, can elements of Si... m be gen- 
erated by (Si; . . . ; S m )-separable operators with bounded norm? The following 
theorem answers these two questions in the affirmative. 

Theorem 7.1 (Generation via bounded separable operators). Let Sj, . . . , S m be 

subspaces of Hermitian operators — all of which contain the identity — and let n = 
dim(Si... m ). Then every element X G Si... m may be written X = X + — X~ where 
X ± are (Si; . . . ; S m ) -separable with 

\\X ± \\ < 2 m - 1 v ^||X|| F . 
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Proof. First, it is proven that there is an orthonormal basis B of Si... m with the 
property that every element E G B may be written E = E + — E~ where E ± are 
(Si; . . . ; S m )-separable with ||£' ± || < 2 m ~ 1 . The proof is by straightforward induc- 
tion on m. The base case m = 1 follows immediately from the earlier observation 
that every element X G Si is generated by some X ± G S± with \\X ± \\ < \\X\\. In 
particular, any element E = E + — E~ of any orthonormal basis of Si has 

11-0*11 < \\E\\ < II^IIf = 1 = 2°. 

In the general case, the induction hypothesis states that there is an orthonormal 
basis B' of Si... m with the desired property. Let B m+ i be any orthonormal basis 
of S m+ i. As in the base case, each F G B m+1 is generated by some F ± G S+ +i 
with \\F ± \\ < ||F|| < 1. Define the orthonormal basis B of S L .. m+ i to consist of all 
product operators of the form E <g> F for E G B' and F G B m+1 . Define 

K+ = (E + <g> F + ) + (E- ® F~) , 
K~ = (E + ® F~) + [E~ ® F + ) . 

It is clear that E®F = K + -K~ and K ± are (Si; . . . ; S m _|_i) -separable. Moreover, 

||^ + || < \\E + ®F + \\ + \\E- ®F-\\ < (2" 1 - 1 x 1) + (2" 1 - 1 x 1) = 2 m . 

A similar computation yields \\K~ \\ < 2 m , which establishes the induction. 

Now, let X G Si... m and let Xj G R be the unique coefficients of X in the 
aforementioned orthonormal basis B = {E±, . . . , E n }. Define 

j : Xj>0 j : Xj <0 

^" = E - E 

J : Xj>0 j : Xj <0 

It is clear that X = X + — X" and X ± are (Si; . . . ; S m )-separable. Employing the 
triangle inequality and the vector norm inequality ||x||i < v^-ll^lb, it follows that 



A + || <2 m - 1 ^|^-| <2 m - 1 v ^ 

3=1 



J2\ x 3\ 2 = 2 m_1 v / ^ll^l 

3=1 



A similar computation yields \\X \\ < 2 m 1 y /n\\X\\ F , which completes the proof. 

□ 



Separable operators as a subtraction from the identity 

At the beginning of this section it was observed that \\X\\I — X lies in S + for all 
X G S. One might wonder whether more could be expected of ||A||J — X than 
mere positive semidefiniteness. For example, under what conditions is || X\\I — X 
a (Si; . . . ; S m )-separable operator? The following theorem provides three such con- 
ditions. Moreover, the central claim of this section is established by this theorem. 
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Theorem 7.2 (Ball of separable operators surrounding the identity). Let Si, ... , S m 

be subspaces of Hermitian operators — all of which contain the identity — and let 
n = dim(Si... m ). The following hold: 

1. || P || J — P is (Si; . . . ; S m )-separable whenever P is a product operator of the 
form P — Pi <S> ■ ■ - <E> P m where each Pi & Sf . 

2. (n + 1) ||Q || I—Q is (Si; . . . ; S m ) -separable whenever Q is (Si; . . . ; S m ) -separable. 

3. 2 m_1 y/n (n + 1) \\X\\ F I — X is (Si; . . . ; S m )- separable for every X 6 Si... m . 

Proof. The proof of item [1] is an easy but notationally cumbersome induction on 
m. The base case m = 1 was noted at the beginning of Section 17.11 For the general 
case, it is convenient to let h... m , I m +i, and Ii... TO +i denote the identity elements 
of Si... m , S m+ i, and S L .. m+ i, respectively. The induction hypothesis states that 
the operator S = ||Pi... TO ||ii... m — P\... m is (Si; . . . ; S m )-separable. Just as in the 
base case, we know 5" = ||P m +i||/ m +i — P m +i lies in S^ +1 . Isolating the identity 
elements, these expressions may be rewritten 

-* l...m ii t-, ■ n (Pl...m + S) 

l|pL...m II 

Im+i — "TT~p u {Pm+1 + 5* ) • 

II m+l || 

Taking the Kronecker product of these two equalities and rearranging the terms 
yields 

|| Pl...m+1 || h...m+l - Pl... m +1 = (Pl...m ® S') + (S ® P m+1 ) + (S ® S') . 

The right side of this expression is clearly a (Si; . . . ; S m+ i)-separable operator; the 
proof by induction is complete. 

Item [2] is proved as follows. By Caratheodory's Theorem (Fact H.4j) . every 
(Si; . . . ; S m )-separable operator Q may be written as a sum of no more than n + 1 
product operators. In particular, 

n+l 

Q = J2 P l,i ® • ■ • ® Pnj 

i=i 

where each P^j is an element of S^. As each term in this sum is positive semidefmite, 
it holds that \\Q\\ > \\Pi,j ® • • • <8> Pmj'H f° r each j. Item [1] implies that the sum 

n+l 

II P l ,3 ® • • ■ ® || / - Pl,i ® • • • <8> P OT ,j 

i=i 

is also (Si; . . . ; S m )-separable. Naturally, each of the identity terms 

\\Pi d ®---®P mJ \\I 
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in this sum may be replaced by || Q || J without compromising (Si; . . . ; S m )-separability, 
from which it follows that (n + 1)\\Q\\I — Q is also (Si; . . . ; S m )-separable. 

To prove item [31 apply Theorem 17.11 to obtain X = X + — X~ where X ± are 
(Si; . . . ; S m )-separable with ((X^l < 2 m ~ 1 v /n||X|| F . By item El it holds that (n + 
1)||X + ||J — X + is (Si; . . . ; S m )-separable, implying that 

2 m ~ 1 v /^(n + 1) ||X|| F /-X+ 

is also (Si; . . . ; S m )-separable. To complete the proof, it suffices to note that adding 
X~ to this operator yields another (Si; . . . ; S m )-separable operator. □ 

Norms of positive super-operators 

We are now in a position to prove new bounds on the capacity of a positive super- 
operator to increase the norm of its output relative to that of its input. While 
these new bounds are not used later in this thesis, it is worthwhile to note them 
and compare them to previously known bounds of this nature. 

The seminal such bound is due to Russo and Dye and states that 

|| $P0|| < ||$(OII ll^ll 

for all X whenever $ is positive |RD66j. In particular, if $ does not increase 
the operator norm of the identity then $ does not increase the operator norm of 
any operator. When discussing bounds of this form, it is convenient to make the 
assumption that ||$(/) || < 1, which allows us to state the bound more succinctly 

as 

|| $P0|| < \\x\\. 

Of course, the original bound, which applies to all positive $, can be recovered 
from this succinct version via suitable rescaling of $ by a factor of ||$(J)||. 

Consider a subspace S C L(A?) that contains the identity. In Bhatia [Bha07j it 
is shown that 

|| $(X)|| < V2\\X\\ 

for all X G S whenever $ : — > L(y) is positive on S + . Essentially, the Russo- 
Dye bound weakens by a factor of a/2 when we relax the positivity requirement to 
a mere subspace of the input space. Gurvits and Barnum showed that 

||spO|| < y/2\\X\\ F 

for all X whenever $ : L(Af) — > L(^) is positive on the unit ball 

{X : ||/*-X|| F < 1} C L(X) 

surrounding the identity [GB03] . This bound is considerably weaker than the previ- 
ous two because the operator norm ||X|| of X is replaced with the Frobenius norm 
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||X||f- On the other hand, it has the advantage that $ need not be positive on an 
entire subspace of ~L(X). Gurvits and Barnum used this additional flexibility to es- 
tablish the existence of a ball of multipartite separable quantum states surrounding 
the completely mixed state. 

To the above list of bounds we add one of our own. While the Gurvits-Barnum 
bound applies only to super-operators $ : h(X) — > h(y) that are positive on a 
set that spans all of L(A?) (namely, the unit ball around the identity), the super- 
operators to which our bound applies might only be positive on a set that does 
not span all of ~L(X). Alas, this flexibility comes at the cost of a multiple of the 
dimension of the input space. For context, our bound is stated as an extension of 
Theorem 2.6.3 of Bhatia [Bha07j . 

Theorem 7.3 (Norms of positive super-operators). Let Si, . . . , S m be subspaces of 
Hermitian operators — all of which contain the identity — and let n = dim(Si... m ). 
Let $ be a super- operator acting on Si... m with the property that $ is positive on 
(Si; . . . ; S m ) -separable operators. The following hold: 

1. ||$(P)|| < ||P|| || $(.T)|| whenever P is a product operator of the form P = 
Pi® ■ ■ ■ ®P m where each Pi e S+. 

2. || &(Q) || < (n + 1) ||<5 1| || $(J) || whenever Q is (Si; . . . ; S m )- separable. 

3. \\®{X)\\ < 2 rn - 1 ^(n + l) \\X\\ F ||$(/)|| for every X e S L .. m . 

Proof. To prove item 1, we observe that 

$ (||P||i - p) = \\p\Mi) - $(p) 

is positive semidefinite. As $(/) and $(P) are also positive semidefinite, it follows 
that ||$(P)|| < || P || || $ (I) || . Item 2 is proved by the same argument with (n + 
1)||Q||/-Q in place of ||P||J-P. 

To prove item 3, apply Theorem 17.11 to obtain X = X + — X~ where X ± 
are (Si; . . . ; S m )-separable with H-X^H < 2 TTl_1 A /rI|| ^ ||f- As ^(X^ are positive 
semidefinite, we have 

||$(X)|| = ||$(X + ) - $(x-)|| 

<max(||$(X + )||,||$(A-)||) 

< max (|| X + || , \\X~ ||) (n + 1) ||$(J) || 

< 2 m - 1 v ^(n + 1) ||A|| F ||$(/)|| . 

□ 
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7.2 Ball around the completely noisy channel 



In Chapter [6] we noted that a quantum operation A is a LOSR operation if and 
only if J (A) is (Qi; . . . ; Q m )-separable. We then established via Theorem !7.2l of the 
previous section that any operator in the product space Qi... m and close enough 
to the identity is necessarily a (Qi; . . . ; Q m )-separable operator, from which the 
existence of a ball of LOSR operations around the completely noisy channel follows. 

Theorem 7.4 (Ball around the completely noisy channel). Let n = dim(Qi... m ) 
and let k = 2 m_1 sfn (n + 1) . For each operator A G Qi... m with \\A\\f < \ there 
exists an unnormalized LOSR operation A : L(A?i... m ) — > L(3^i... m ) for which 

J (A) = I-A. 

As a consequence, any quantum operation 5 : L(A' 1 , m ) — > L(3^i... m ) with 

||J(E)-J(A)|| F <± 

is a LOSR operation. Here A denotes the completely noisy channel and d = 
dim(y L .. m ). 

Theorem 17.41 establishes a ball of LOSR operations (and hence also of LOSE 
operations) surrounding the completely noisy channel. However, there seems to be 
no obvious way to obtain a bigger ball if such a ball is allowed to contain operations 
that are LOSE but not LOSR. Perhaps a more careful future investigation will 
uncover such a ball. 



The subspace containing the ball of LOSR operations 

The ball of Theorem 17.41 is contained within the product space Qi... m , which is a 
strict subspace of the space spanned by all quantum operations $ : ~L(Xi m ) — > 
L(3^i...m)- Why was attention restricted to this subspace? The answer is that there 
are no LOSE or LOSR operations A for which J (A) lies outside Qi... m . In other 
words, Qi... m is the largest possible space in which to find a ball of LOSR operations. 
We shall return to this topic in Chapter ITUl wherein it is shown that the space Qi... m 
is generated by the so-called no-signaling quantum operations. 

Of course, there exist quantum operations arbitrarily close to the completely 
noisy channel that are not no-signaling operations, much less LOSE or LOSR op- 
erations. This fact might seem to confuse the study of, say, the effects of noise 
on such operations because a completely general model of noise would allow for 
extremely tiny perturbations that nonetheless turn no-signaling operations into 
signaling operations. This confusion might even be exacerbated by the fact that 
separable quantum states, by contrast, are resilient to arbitrary noise: any conceiv- 
able physical perturbation of the completely mixed state is separable, so long as 
the perturbation has small enough magnitude. 
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There is, of course, nothing unsettling about this picture. In any reasonable 
model of noise, perturbations to a LOSE or LOSR operation occur only on the 
local operations performed by the parties involved, or perhaps on the state they 
share. It is easy to see that realistic perturbations such as these always maintain 
the no-signaling property of these operations. Moreover, any noise not of this 
form could, for example, bestow faster-than-light communication upon spatially 
separated parties. 
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Chapter 8 



Recognizing LOSE Operations is 
NP-hard 



In this chapter the existence of the ball of LOSR operations around the completely 
noisy channel is employed to prove that the weak membership problem for LOSE 
operations is strongly NP-hard. Informally, the weak membership problem asks, 

"Given a description of a quantum operation A and an accuracy param- 
eter e, is A within distance e of a LOSE operation?" 

This result is achieved in several stages. Section 18.11 reviews a relevant recent 
result of Kempe et al. pertaining to quantum games. In Section 18.21 this result is 
exploited in order to prove that the weak validity problem — a relative of the weak 
membership problem — is strongly NP-hard for LOSE operations. Finally, Section 
18.31 illustrates how the strong NP-hardness of the weak membership problem for 
LOSE operations follows from a Gurvits-Gharibian-style application of Liu's version 
of the Yudin-Nemirovskii Theorem. It is also noted that similar NP-hardness results 
hold trivially for LOSR operations, due to the fact that separable quantum states 
arise as a special case of LOSR operations in which the input space is empty. 

8.1 Co-operative quantum games with shared en- 
tanglement 

Local operations with shared entanglement have been previously studied in the 
context of two-player co-operative games. In these games, a referee prepares a 
question for each player and the players each respond to the referee with an answer. 
The referee evaluates these answers and declares that the players have jointly won 
or lost the game according to this evaluation. The goal of the players, then, is to 
coordinate their answers so as to maximize the probability with which the referee 
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declares them to be winners. In a quantum game the questions and answers are 
quantum states. 

In order to differentiate this model from a one-player game, the players are not 
permitted to communicate with each other after the referee has sent his questions. 
The players can, however, meet prior to the commencement of the game in order 
to agree on a strategy. In a quantum game the players might also prepare a shared 
entangled quantum state so as to enhance the coordination of their answers to the 
referee. 

More formally, a quantum game G = (q, 7r,R, V) is specified by: 

• A positive integer q denoting the number of distinct questions. 

• A probability distribution n on the question indices {1, . . . , q}, according to 
which the referee selects his questions. 

• Complex Euclidean spaces V, X±, X 2 , A\, A 2 corresponding to the different 
quantum systems used by the referee and players. 

• A set R of quantum states R = {pi} q i=1 C H + (V ® X x ® X 2 ). These states 
correspond to questions and are selected by the referee according to it. 

• A set V of unitary operators V = {V^}| =1 C L(V®Ai ®A 2 ). These unitaries 
are used by the referee to evaluate the players' answers. 

For convenience, the two players are called Alice and Bob. The game is played as 
follows. The referee samples i according to it and prepares the state pi G R, which 
is placed in the three quantum registers corresponding to V <E> X 1 <E> X 2 . This state 
contains the questions to be sent to the players: the portion of pi corresponding 
to X 1 is sent to Alice, the portion of pi corresponding to X 2 is sent to Bob, and 
the portion of p^ corresponding to V is kept by the referee as a private workspace. 
In reply, Alice sends a quantum register corresponding to A\ to the referee, as 
does Bob to A 2 . The referee then applies the unitary operation Vi G V to the 
three quantum registers corresponding to V <E> Ai <E> A 2 , followed by a standard 
measurement {n accept , n re j ect } that dictates the result of the game. 

As mentioned at the beginning of this subsection, Alice and Bob may not com- 
municate once the game commences. But they may meet prior to the commence- 
ment of the game in order prepare a shared entangled quantum state a. Upon 
receiving the question register corresponding to X 1 from the referee, Alice may 
perform any physically realizable quantum operation upon that register and upon 
her portion of a. The result of this operation shall be contained in the quantum 
register corresponding to Ai — this is the answer that Alice sends to the referee. 
Bob follows a similar procedure to obtain his own answer register corresponding to 
A 2 . 

For any game G, the value ou(G) of G is the supremum of the probability with 
which the referee can be made to accept taken over all strategies of Alice and Bob. 
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Theorem 8.1 (Kempe et al. [K KM+08] ). There is a fixed polynomial p such that 
the following promise problem is NP-hard under mapping (Karp) reductions: 

Input. A quantum game G = (g,7r,R, V). The distribution tc and the sets R, V 
are each given explicitly: for each i = 1, . . . , q, the probability 7c(i) is given in 
binary, as are the real and complex parts of each entry of the matrices pi and 
Vi. 

Yes. The value u>{G) of the game G is 1. 

No. The value co(G) of the game G is less than 1 — ^k. 

8.2 Strategies and weak validity 

Viewing the two players as a single entity, a quantum game may be seen as a two- 
message quantum interaction between the referee and the players — a message from 
the referee to the players, followed by a reply from the players to the referee. The 
actions of the referee during such an interaction are completely specified by the 
parameters of the game. 

In the language of Part [U the game specifies a one-round measuring co-strategy 
for the referee represented by some positive semidefinite operators 

-Raccept , -Rreject G H + {-Al...2 ® ..2), 

which are easily computed given the parameters of the game. 

In these games, the players implement a one-round non-measuring strategy com- 
patible with {-Raccept, -^reject} whose representation is given by a positive semidefinite 
operator 

PeH+(4.. 2 ^u). 

For any fixed strategy P for the players, Theorem 13.11 tells us that the probability 
with which the players cause the referee to accept is given by the inner product 

Pr [Players win with strategy P] = (-R acce pt, P)- 

In any game, the players combine to implement some physical operation A : 
L(^fi...2) - > L(*4.! 2 )- It is clear that a given super-operator A denotes a legal strat- 
egy for the players if and only if A is a LOSE operation. As the players implement 
a one-round non-measuring strategy, the representation P of their strategy is given 
byP = J(A). 

Thus, the problem studied by Kempe et al. [KKM + 08] of deciding whether 
u(G) = 1 can be reduced via the formalism of strategies to an optimization problem 
over the set of LOSE operations: 

U)(G)= SUp (-R acce pt, J( A)). 
A e LOSE 

The following theorem is thus proved. 
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Theorem 8.2. The weak validity problem for the set of LOSE [LOSR] operations 
is strongly NP-hard [NP-complete] under mapping (Karp) reductions: 

Input. A Hermitian matrix R, a real number'-/, and a positive real number e > 0. 
The number 7 is given explicitly in binary, as are the real and complex parts 
of each entry of R. The numbers is given in unary, where I s denotes e = 1/s. 

Yes. There exists a LOSE [LOSR] operation A such that (R, J (A)) > 7 + e. 

No. For every LOSE [LOSR] operation A we have (R, J (A)) < 7 — e. 

Remark 8.2.1. The hardness result for LOSR operations follows from a simple 
reduction from separable quantum states to LOSR operations: every separable 
state may be written as a LOSR operation in which the input space has dimen- 
sion one. That weak validity for LOSR operations is in NP (and is therefore NP- 
complete) follows from the fact that all LOSR operations may be implemented with 
polynomially-bounded shared randomness (Proposition 16. 6ft . 

8.3 The Yudin-Nemirovskii Theorem and weak 
membership 

Having established that the weak validity problem for LOSE operations is strongly 
NP-hard, the next step is to follow the leads of Gurvits and Gharibian [Gur02l 
IGha0 8j and apply Liu's version |Liu07| of the Yudin-Nemirovskii Theorem |YN76l 
GLS88J in order to prove that the weak membership problem for LOSE operations 
is also strongly NP-hard. 

The Yudin-Nemirovskii Theorem establishes an oracle-polynomial-time reduc- 
tion from the weak validity problem to the weak membership problem for any 
convex set C that satisfies certain basic conditions. One consequence of this theo- 
rem is that if the weak validity problem for C is NP-hard then the associated weak 
membership problem for C is also NP-hard. Although hardness under mapping 
reductions is preferred, any hardness result derived from the Yudin-Nemirovskii 
Theorem in this way is only guaranteed to hold under more inclusive oracle reduc- 
tions. 

The basic conditions that must be met by the set C in order for the Yudin- 
Nemirovskii Theorem to apply are 

(i) C is bounded, 

(ii) C contains a ball, and 

(iii) the size of the bound and the ball are polynomially related to the dimension 
of the vector space containing C. 
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It is simple to check these criteria against the set of LOSE operations. For condition 
(i), an explicit bound is established by Proposition 11.31 The remaining conditions 
then follow from Theorem 17.41 

The following theorem is now proved. (As in Remark 18.2. 1[ the analogous 
result for LOSR operations follows from a straightforward reduction from separable 
quantum states.) 

Theorem 8.3. The weak membership problem for the set of LOSE [LOSR] opera- 
tions is strongly NP-hard [NP -complete] under oracle (Cook) reductions: 

Input. A Hermitian matrix X G Qi... m and a positive real number e > 0. The 
real and complex parts of each entry of X are given explicitly in binary. The 
number e is given in unary, where I s denotes e = 1/s. 

Yes. X = J (A) for some LOSE [LOSR] operation A. 

No. || X - J (A) || > e for every LOSE [LOSR] operation A. 
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Chapter 9 

Characterizations of Local 
Operations 

Characterizations of LOSE and LOSR operations are presented in this chapter. 
These characterizations are reminiscent of the well-known characterizations of bi- 
partite and multipartite separable quantum states due to Horodecki et al. [HHH96, 
IHHHOlj . 

Specifically, it is proven in Section 19.11 that A is a LOSR operation if and 
only if <£)(J(A)) > for every linear functional tp that is positive on the cone 
of (Qi; . . . ; Q m )-separable operators. (This cone is defined in Definitions 16.41 and 
16.21 ) This characterization of LOSR operations is proved by a straightforward ap- 
plication of the fundamental Separation Theorems of convex analysis (Facts [1751 and 

OD. 

More interesting is the characterization of LOSE operations presented in Section 
19.21 A is a LOSE operation if and only if ip(J(A)) > for every linear functional (p 
that is completely positive on that same cone of (Qi; . . . ; Q m )-separable operators. 
Prior to the present work, the notion of complete positivity was only ever considered 
in the context wherein the underlying cone is the positive semidefinite cone. Indeed, 
what it even means for a super-operator or functional to be "completely" positive 
on some cone other than the positive semidefinite cone must be clarified before any 
nontrivial discussion can occur. 

9.1 Characterization of local operations with shared 
randomness 

The characterization of LOSR operations presented herein is an immediate corollary 
of the following simple proposition. 

Proposition 9.1. Let K C R n be any closed convex cone. A vector x G R n is an 
element of K if and only if ip(x) > for every linear functional <p : R n — > R that 
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is positive on K . 

Proof. The "only if" part of the proposition is immediate: as x is in K, any linear 
functional positive on K must also be positive on x. For the "if" part of the 
proposition, suppose that x is not an element of K. The Separation Theorem (Fact 
II. 5p implies that there exists a vector h e M n such that (h, y) > for all y G K, yet 
(h, x) < 0. (To apply Fact ll.5[ consider a small open ball that is disjoint from K 
and contains x.) Let ip : MJ 1 — > R be the linear functional given by ip : z H- (h, z). 
It is clear that ip is positive on K, yet ip(x) < 0. □ 

Corollary 9.1.1 (Characterization of LOSR operations). A quantum operation 
A : L(Xi___ m ) — > L(Ai,,, m ) is an m-party LOSR operation if and only ifip(J(A)) > 
for every linear functional ip : L(Ai... m <S> X\...m) — > C that is positive on the cone of 
(Qi; . . . ; Q m ) -separable operators. 

Proof. In order to apply Proposition 19. 1[ it suffices to note the following: 

• The space H(Ai... m ® ^i... m ) is isomorphic to R n for n = dim(^4 L .. m ® X\ ... m ) 2 . 

• The (Qi; . . . ; Q m )-separable operators form a closed convex cone within the 
space H(Ai... m <8> ^i... m )- 

While Proposition 19.11 only gives the desired result for real linear functionals 
p : H(Ai... m <g) Xi... m ) it is trivial to construct a complex extension functional 

: L(^4.i... m g) Xi m ) —¥ C that agrees with ip on H(^4.i... m <8) X\ ... m ). □ 



9.2 Characterization of local operations with shared 
entanglement 

In order to state our characterization of LOSE operations, it is convenient to pa- 
rameterize the shorthand notation Qj of Definition 16. 2\ which denotes the subspace 
of Hermitian operators X with X = J(^) for some trace-preserving super-operator 
f, or a scalar multiple thereof. 

Definition 9.2 (Parameterization Qj(£j) of the shorthand notation Qj). For each 
i — 1, . . . , m and each complex Euclidean space Si, let 

Qi(£i) c H{Ai <g> Xi ® £;) 

denote the subspace of operators J(^) for which 

is a trace-preserving super-operator, or a scalar multiple thereof. In particular, the 
parameter space St is always tensored with the input space of as opposed to the 
output space. □ 
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Theorem 9.3 (Characterization of LOSE operations). A quantum operation 

A : L(X Um ) ->• L(Ai... m ) 

is an m-party LOSE operation if and only if ip(J(A)) > for every linear functional 

ip : L(Ai... m <g> Xi... m ) -> C 

wif/i the property that the super- operator (<p £g> 1^ m ) zs positive on the cone of 
(Qi(£i); • • • ; Q m (^m)) -separable operators for all choices of complex Euclidean spaces 



Remark 9.3.1. The positivity condition of Theorem 19 . 3 1 b ears striking resemblance 
to the familiar notion of complete positivity of a super-operator. With this resem- 
blance in mind, a linear functional ip obeying the positivity condition of Theorem 
19.31 is said to be completely positive on the (Qi(£i); . . . ; Q ro (£ ro ))- separable family 
of cones. In this sense, Theorem 19. 31 represents what seems, to the knowledge of the 
author, to be the first application of the notion of complete positivity to a family 
of cones other than the positive semidefinite family. 

Moreover, for any fixed choice of complex Euclidean spaces £\,...,£ m there 
exists a linear functional ip for which the super-operator (ip <S> ls 1 m ) is positive on 
the cone of (Qi(£i); . . . ; Q m (£ m ))-separable operators, and yet ip is not completely 
positive on this family of cones. This curious property is a consequence of the fact 
the set of LOSE operations with finite entanglement is not a closed set. By contrast, 
complete positivity (in the traditional sense) of a super-operator $ : L(X) —> L(A) 
is assured whenever (<& £g> 1%) is positive for a space Z with dimension at least that 
of X. (See, for example, Bhatia |Bha07] for a proof of this fact.) 

The proof of Theorem 19.31 employs the following helpful identity involving the 
Choi-Jamiolkowski representation for super-operators. This identity is proven by 
straightforward calculation. 

Proposition 9.4. Let $ : L(X <g> £) -)> L(A) and let Z e L(£). Then the super- 
operator A : L(X) -)■ L(A) defined by A(X) = ty(X <g> Z) for all X satisfies 



Proof. Let {ei, . . . , edim(A')} and {fi, . . . , /di m (£)} denote the standard bases of X 
and £, respectively, and let z^i G C be the coefficients of Z in the basis {fkfi '■ 
k, I = 1, . . . , dim(£)} of L(£). We have 



Tr £ ((W ® Z T ) J(*)) = Z) * ( e ^* ® fkf ?) ® e ^ ' Tr i ZT M) 



£ 



J(A)=Tr £ ((l A ® x ®Z T ) J{9)). 



dim(X) dim(£) 




□ 
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The following technical lemma is also employed in the proof of Theorem 19.31 

Lemma 9.5. Let * : L(X®£) L(A), let Z G L(£), and let <p> : L(A® X) -»■ C. 

TTien i/ie super- operator A : L(Af) — > L(*4.) defined by A(X) = \I/ (X £g> Z) for all 
X satisfies 

<p(J(A)) = (Z,(t P ®l e )(J(*))). 

Proof. Let if be the unique operator satisfying <^(X) = (H,X) for all X and note 
that the adjoint </?* : C — > L(A <8> satisfies <p*(l) = H. Then 

® Is) ( J(*))> = (y>*(l) ® Z, J(*)> = {H®Z, J(*)> 

= (tf,Tr£ ((W ® ^ T ) A*))) = V(J(A)). 

□ 

Proof of Theorem \9.3[ For the "only if" part of the theorem, let A be any LOSE 
operation with finite entanglement and let ^x, . . . , \l/ m , a be such that 

A : X ^ Oi... m ) (X(g)cr). 

Let <y? be any linear functional on ~L{Ai... m ®Xi.^ m ) that satisfies the stated positivity 
condition. Lemma 19.51 implies 

<p(J(A)) = (a, {tp ® l £l _) ( J(*!... m ))> > 0. 

A standard continuity argument establishes the desired implication when A is a 
finitely approximable LOSE operation. 

For the "if" part of the theorem, suppose that 5 : h(Xx___ m ) — > L(Ai... m ) is a 
quantum operation that is not a LOSE operation. The Separation Theorem (Fact 
II. 6p implies that there is a Hermitian operator H G ~H.(A\... m ® Xi_ m ) such that 
(H, J (A)) > for all LOSE operations A, yet (H, J(S)> < 0. Let 

ip : L(^4i... m ® Xt_ m ) ->■ C 

be the linear functional given by 97 : X 1— >■ (H, X) . 

It remains to verify that tp satisfies the desired positivity condition. Toward that 
end, let £1, . . . , £ m be arbitrary complex Euclidean spaces. By convexity, it suffices 
to consider only those (Qi(£i); . . . ; Q m (£ m ))-separable operators that are product 
operators. Choose any such operator and note that, up to a scalar multiple, it has 
the form J(^i... m ) where each \l/j : L(Xi <g> £j) — > L( v 4 i ) is a quantum operation. 
The operator 

(<P® l£i... m ) (■/(*l...m)) 

is positive semidefinite if and only if it has a nonnegative inner product with every 
density operator in H + (£i... m ). As a ranges over all such operators, so does a. 
Moreover, every such a — together with . . . , \l/ m — induces a LOSE operation A 
defined by A : X h> (^i... m ) (X £g> a). Lemma 1531 and the choice of ip imply 

< <p{J{A)) = (a, (<p ® l £l .,.J (J(*i... m ))) , 
and so ip satisfies the desired positivity condition. □ 
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Chapter 10 

No-Signaling Operations 



At the end of Chapter [7] it was claimed that the product space Qi... m is spanned by 
Choi-Jamiolkowski representations of no-signaling operations. It appears as though 
this fact has yet to be noted explicitly in the literature, so a proof is offered in this 
chapter. 

More accurately, two characterizations of no-signaling operations are presented 
in Section [10. 2[ each of which is expressed as a condition on Choi-Jamiolkowski rep- 
resentations of super-operators. It then follows immediately that Qi... m is spanned 
by Choi-Jamiolkowski representations of no-signaling operations. 

Finally, Section 110.31 provides an example of a so-called separable no-signaling 
operation that is not a LOSE operation, thus ruling out an easy "short cut" to the 
ball of LOSR operations revealed in Theorem 17.41 

10.1 Formal definition of a no-signaling operation 

Intuitively, a quantum operation A is no-signaling if it cannot be used by spatially 
separated parties to violate relativistic causality. Put another way, an operation A 
jointly implemented by several parties is no-signaling if those parties cannot use A 
as a "black box" to communicate with one another. 

In order to facilitate a formal definition for no-signaling operations, the short- 
hand notation for Kronecker products from Chapter [1] must be extended: if K C 
{1, . . . , m} is an arbitrary index set with K = {k\, . . . , k n } then we write 

X K = X kl ® • • • ® X kn 

with the convention that X$ = C. As with the original shorthand, a similar notation 
also applies to operators, sets of operators, and super-operators. The notation K 
refers to the set of indices not in K, so that K,K is a partition of {1, . . . , m}. 
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Definition 10.1 (No-signaling operation). A quantum operation A : L(A' L . m ) — y 
L(*4i... m ) is an m-party no-signaling operation if for each index set K C {1, . . . , m} 
we have 

Tr AK (A(p))=Tr AK (A(a)) 

whenever 

□ 

What follows is a brief argument that Definition IIP. II captures the meaning of a 
no-signaling operation — a more detailed discussion of this condition can be found 
in Beckman et al. [BGNP01J. If A is no-signaling and p,a are locally indistin- 
guishable to a coalition K of parties (for example, when Tr^_(p) = Tr ^_(cr)) then 
clearly the members of K cannot perform a measurement on their portion of the 
output that might allow them to distinguish A(p) from A(<r) (that is, Tr_4_(A(p)) = 
Tr > 4_(A(a))). For otherwise, the coalition K would have extracted information — a 
signal — from the other parties that would allow it to distinguish p from a. 

Conversely, if there exist input states p, cx such that Tr^_(p) = Tr ^_(cr) and 
yet Tr_4_(A(p)) 7^ Tr4_(A(cr)) then there exists a measurement that allows the 
coalition K to distinguish these two output states with nonzero bias, which implies 
that signaling must have occurred. 

It is not hard to see that every LOSE operation is also a no-signaling operation. 
Conversely, much has been made of the fact that there exist no-signaling opera- 
tions that are not LOSE operations — this is so-called "super-strong" nonlocality, 
exemplified by the popular "nonlocal box" discussed in Section 110.31 

10.2 Two characterizations of no-signaling oper- 
ations 

In this section it is shown that the product space Qi... m is spanned by Choi- 
Jamiolkowski representations of no-signaling operations. (Recall from Definition 
16.21 that each Qj C H(Ai <g) Xi) denotes the subspace of Hermitian operators J($) 
for which $ : L(Ai) — y ~L{Ai) is a trace-preserving super-operator, or a scalar mul- 
tiple thereof.) Indeed, that fact is a corollary of the following characterizations of 
no-signaling operations. 

Theorem 10.2 (Two characterizations of no-signaling operations). Let A : L(A' 1 m ) —y 
L(*4i... m ) be a quantum operation. The following are equivalent: 

1. A is a no-signaling operation. 

2. J (A) is an element o/Q L .. m . 
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3. For each index set K C {1, . . . , m} there exists an operator Q G H + (A^®At^) 
wift Tr^ x ( J(A)) = Q ® I Xk . 

Remark 10.2.1. Membership in the set of no-signaling operations may be verified 
in polynomial time by checking the linear constraints in Item [3] of Theorem 110.21 
While the number of such constraints grows exponentially with m, this exponential 
growth is not a problem because the number of parties m is always O(logn) for 
n = dim(Qi.„ m ). (This logarithmic bound follows from the fact that each space 
Qi has dimension at least two and the total dimension n is the product of the 
dimensions of each of the m different spaces.) 

The partial trace condition of Item [3] of Theorem 110.21 is quite plainly suggested 
by Theorem 13.21 (Characterization of strategies). Moreover, essential components 
of the proofs presented for two of the three implications claimed in Theorem 110.21 
appear in a 2001 paper of Beckman et al. |BGNP0l] . The following theorem, 
however, establishes the third implication and appears to be new. 

Theorem 10.3. A Hermitian operator X G H(Ai... m <S> A?i... m ) is in Qi... m if and 
only if for each index set K C {1, . . . , m} there exists a Hermitian operator Q G 
tt(Ax ® %) with Tt Ak (X) = Q®I Xk . 

Proof. The "only if" portion of the theorem is straightforward — only the "if" por- 
tion is proven here. The proof proceeds by induction on m. The base case m = 1 is 
trivial. Proceeding directly to the general case, let s = dim(H(^4. m+ i ® X m+ i)) and 
let {Ei, . . . ,E S } be a basis of H(Am + i®X m+1 ). Let Xi, . . . , X s G H(Ai... m <2)Xi... m ) 
be the unique operators satisfying 

s 
3=1 

It shall be proven that X\, . . . ,X S G Qi... m - The intuitive idea is to exploit the 
linear independence of Ei,...,E s in order to "peel off" individual product terms 
in the decomposition of X. 

Toward that end, for each fixed index j G {l,...,s} let Hj be a Hermitian 
operator for which the real number {Hj, Ei) is nonzero only when i = j. Define a 
linear functional ifij : E h-> {Hj, E) and note that 

s 

(l^i... m ®*... m ® <P,) (X) = y £ i i Pj (E i )X i = rjiEjjXj. 

i=i 

Fix an arbitrary partition K,K of the index set {l,...,m}. By assumption, 
Tr_4 K (X) — Q <S> Ix K for some Hermitian operator Q. Apply Tr_4 A . to both sides of 
the above identity, then use the fact that Tr_^ x and cpj act upon different spaces to 
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obtain 

^nv.u.Y ; ) 

= Tr_4 K ((U... mM .., m <8> <pj) (X)) 
= (^M...„®%)(T^(I)) 
= {^A^x- ® if,) (Q) <g> , 

from which it follows that Tr_4 K (Xj) is a product operator of the form R <g> J^ K for 
some Hermitian operator i?. As this identity holds for all index sets K, it follows 
from the induction hypothesis that Xj G Qi... m as desired. 

Now, choose a maximal linearly independent subset {X 1; . . . , X t } of {Xi, . . . , X s } 
and let Yx, . . . , Y t be the unique Hermitian operators satisfying 

t 

X = Y,Xi®Yi. 

i=i 

A similar argument shows Y±, . . . ,Y t G Q m +i, which completes the induction. □ 

Proof of Theorem \10.2[ Item [3] implies item El This implication follows imme- 
diately from Theorem 110.31 

Item [2] implies item [H The proof of this implication borrows heavily from the 
proof of Theorem 2 in Beckman et al. |BGNP0l] . 

Fix any partition K, K of the index set {1, . . . , m}. Let s = dim(L(A^)) and 
t = dim(L(Af^)) and let {p%, . . . , p s } and {a\, . . . , a t } be bases of L(A^) and 
L(X K ), respectively that consist entirely of density operators. Given any two 
operators 1,1' 6 L(A' 1 _ m ) let Xj^,Vj,k G C be the unique coefficients of X 
and Y respectively in the product basis {pj®cr k }. Then Trx K (X) = Tt Xk {Y) 
implies 

* t 

k=l k=l 

for each fixed index j = 1, . . . , s. 

As J (A) G Qi... m , it is possible to write 

n 

J(A) = J ( $ V) ® ' • • ® J (*m,/) 
Z=l 

where n is a positive integer and $.y : L(A' i ) — > L(^4j) satisfies J(&i,i) G Qi 
for each of the indices % = 1, . . . , m and I — 1, ... ,n. In particular, as each 
is (a scalar multiple of) a trace-preserving super-operator, it holds that 
for each index I = 1, . . . ,n there exists a\ G R with Tr ($^(cr)) = a/ for all 
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density operators a. Then 

n s / t 

Tt Ak (A(X)) = j>i • £ ) ' 

1=1 j=l \k=l 

t 



1=1 j=l \k=l 



as desired. 



em [JJ implies item [31 This implication is essentially a multi-party generaliza- 
tion of Theorem 8 in Beckman et al. [BGNPOlJ. The proof presented here 
differs from theirs in some interesting but non-critical details. 

Fix any partition K, K of the index set {1, . . . , m}. To begin, observe that 

Tr XK (X) = Tr XK (Y) =► Tr AK (A(X)) = Tr AK (A(Y)) 

for all operators 1,7 6 L(Xi_ m ) — not just density operators. (This observa- 
tion follows from the fact that L(Xi m ) is spanned by the density operators — a 
fact used in the above proof that item [2] implies item[IJ) 

Now, let s = dim(A^) and t = dim(X K ) and let {ei, . . . , e s } and {fx, . . . , f t } 
be the standard bases of X-^ and Xx respectively. If c and d are distinct 
indices in {1, ... , t} and Z 6 L(Xj^) is any operator then 

Tt Xk (Z <S> fcfi) = Z® Tr(f c f* d ) = X _ = Tr^(0^,.. m ) 

and hence 

Tt Ak (A (Z ® f c f*)) = Tt Ak (A (0*,..J) = Tt Ak (0^,.. J = 0^_. 

(Here a natural notation for the zero operator was used implicitly.) Similarly, 
if p G h(X K ) is any density operator then 

Tr^ (A (Z ® / c / c *)) = Tr^ (A (Z ® p)) 

for each fixed index c = 1, . . . , t. Employing these two identities, one obtains 

s t 

Tt Ak (J (A)) =J2H Tr ^ ( A M ® ® ( e " e & ® /«£) 

a,b=l c=l 

= (A (e a el ® p)) ® e a e* b ® f ^ / c / c * ) = J(¥) ® /* K 



a,b=l \c=l 



where the quantum operation \1/ is defined by $ : A i-> Tr_4 K (A (X ® p)). As 
J(^) ® I^jf is a product operator of the desired form, the proof that item [1] 
implies item [3] is complete. 

□ 
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10.3 A separable no-signaling operation that is 
not a LOSE operation 



Theorem 17.41 establishes a ball of LOSR operations around the completely noisy 
channel. Was the work of Chapter [7] necessary, or might there be a simpler way 
to establish the same thing? For example, suppose A : L(Xi ® X 2 ) — > L{Ai ® A 2 ) 
is a quantum operation for which the operator J (A) is (H(.Ai ® X\) \ H(^4 2 ® X 2 ))- 
separable. Quantum operations with separable Choi-Jamiolkowski representations 
such as this are called separable operations |Rai97j . If an operation is both sepa- 
rable and no-signaling then must it always be a LOSE operation, or even a LOSR 
operation? An affirmative answer to this question would yield a trivial proof of The- 
orem 17.41 that leverages existing knowledge of separable balls around the identity 
operator. 

Alas, such a short cut is not to be had: there exist no-signaling operations 
A that are not LOSE operations, yet J{A) is separable. One example of such 
an operation is the so-called "nonlocal box" discovered in 1994 by Popescu and 
Rohrlich [PR94j. This nonlocal box is easily formalized as a two-party no-signaling 
quantum operation A, as in Ref. [BGNPOl] Section V.B]. That formalization is 
reproduced here. 

Let X\ = X 2 = At = A 2 = C 2 , let {eo,ei} denote the standard bases of both 
X 1 and A%, and let {/o, /1} denote the standard bases of both X 2 and A 2 . Write 

Pab = e a e a ® f b f b 

for a, b G {0, 1}. The nonlocal box A : L(A\ 2 ) — ► L(Ai... 2 ) is defined by 



{poo, P01, P10} 



Pn 



A I 

~^ 2 

A 1 



(Poo + Pll) 

(P01 + P10) 



Operators not in span{p o, P01, Pio> Pn} are annihilated by A. It is routine to verify 
that A is a no-signaling operation, and this operation A is known not to be a LOSE 
operation [PR94j . To see that J (A) is separable, write 



E, 



dcf ^ 

a— >b — ^b&a 

TP ll f / f* 

r a^b — JbJa 



for a, b e {0, 1}. Then for all X e L(X 1 ,„ 2 ) it holds that 



+ 



2 
1 

+ 2 



Eq^q <g> Fq^q 

E^ ® 



X 
X 
X 
X 



Eq^o ® F -+ 
E ^ <g) Fi_> 



2 
1 

+ 2 

1 

+ 2 

1 

+ 2 



A 
A 
A 
A 
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from which the (H(Al (g) X ± ); H(^4 2 ® A' 2 ))-separability of J(A) follows. It is inter- 
esting to note that the nonlocal box is the smallest possible nontrivial example of 
such an operation — the number of parties m = 2 and the input spaces Xi, X 2 and 
output spaces A±,A 2 all have dimension two. 
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Chapter 11 
Conclusion 



In this thesis we discussed two distinct topics. In Part UJ we initiated the study of 
quantum strategies, which are complete descriptions of one party's actions in an 
interaction involving the exchange of multiple quantum messages among multiple 
parties. We saw proofs of three important properties of strategies, and we saw 
applications of these properties to zero-sum quantum games, complexity theory, 
and quantum coin-flipping. We also introduced a new norm for super-operators and 
argued that this norm, which generalizes the familiar diamond norm, captures the 
operational distinguishability of two quantum strategies in the same sense that the 
trace norm captures the distinguishability of two quantum states, or the diamond 
norm captures the distinguishability of two quantum operations. 

In Part [Til we established several properties of local quantum operations, the 
implementation of which might be assisted by shared entanglement. Specifically, 
we showed that every quantum operation sufficiently close to the completely noisy 
operation can be implemented locally using only shared randomness. This fact 
was used to prove strong NP-hardness of the weak membership problem for local 
operations with shared entanglement. We then provided algebraic characterizations 
of the sets of local operations with shared randomness and entanglement in terms 
of linear functionals that are positive and "completely" positive, respectively, on a 
certain cone of separable Hermitian operators. Finally, we made explicit for the first 
time two fundamental characterizations of no-signaling operations, establishing that 
the spaces spanned by the local operations and by the larger class of no-signaling 
operations are in fact equal. 

We conclude the thesis with some pointers for future research and open problems 
pertaining to the topics covered. 

11.1 Quantum strategies 

New properties. Three important properties of quantum strategies were estab- 
lished in Theorems 13.11 (Interaction output probabilities), 13.21 (Characteriza- 
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tion of strategies), and 13.31 (Maximum output probability). Other simpler 
and more basic properties were noted in Propositions 12. 7\ 13.151 13.161 and 
13.171 We also saw several properties of a new distance measure for quantum 
strategies in Chapter [5) What other properties are held by our representation 
for quantum strategies? 

Simplifying proofs. In Section H~3l we employed the properties of quantum strate- 
gies to provide a simplified proof of Kitaev's bound for strong quantum coin- 
flipping. We also noted in Section II. 1.11 that Chiribella et al. have provided 
a short proof by quantum strategies of the impossibility of quantum bit com- 
mitment |CDP+09bj . 

Given these examples, one is tempted to believe that the properties of quan- 
tum strategies encapsulate many of the critical elements of various proofs 
involving the exchange of quantum information. It is reasonable to expect, 
for example, that our formalism could lead to new or alternate security proofs 
for various quantum cryptographic protocols, or possibly even to proofs that 
certain classical protocols are secure against quantum attacks. 

For an unsolved example, consider the protocol for weak quantum coin- 
flipping with arbitrarily small bias given in Ref. |Moc07] . The proof that 
the exhibited protocol has arbitrarily small bias is very complicated. Could 
this proof be simplified by quantum strategies? 

New applications. Of course, the formalism of quantum strategies is by no means 
limited to simplifications of existing proofs, as illustrated by the new re- 
sults established in Sections 14. 1[ 14.21 and 18.21 and by Chiribella, D'Ariano, 
Perinotti, and other authors as discussed in Section 11.1.11 Surely, there is 
more to add to this list of new applications. 

11.2 Local operations with shared entanglement 

Bigger ball of LOSE or LOSR operations. The size of the ball of (unnormal- 
ized) LOSR operations established in Theorem 17.41 scales as Vt (2~ m n~ 3 ' 2 ) . 
Given that this quantity already includes a factor of the dimension n, is it 
possible to eliminate the explicit dependence on the number of parties ml (By 
contrast, for the case of multipartite separable quantum states the dependence 
on m seems unavoidable [GB03].) Can the exponent on the dimension n be 
improved? 

As mentioned in Section 17.21 it is not clear that there is a ball of LOSE 
operations that strictly contains any ball of LOSR operations. Does such a 
larger ball exist? 

Completely positive super-operators. As noted in Remark 19.3.11 the charac- 
terization of LOSE operations is interesting because it involves linear func- 
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tionals that are not just positive, but "completely" positive on the family of 
(Qi(£i); • • • ; Q m (£ m ))-separable cones. 

Apparently, the study of completely positive super-operators has until now 
been strictly limited to the context of positive semidefmite input cones. Any 
question that may be asked of conventional completely positive super-operators 
might also be asked of this new class of completely positive super-operators. 

Entanglement required for approximating LOSE operations. It was men- 
tioned in Chapters [1] and [6] that there exist LOSE operations that cannot be 
implemented with any finite amount of shared entanglement [LTW08] . The 
natural question, then, is how much entanglement is necessary to achieve an 
arbitrarily close approximation to such an operation? 

The present author conjectures that for every two-party LOSE operation A 
there exists an e- approximation A' of A in which the dimension of the shared 
entangled state scales as 0{2 £ a n b ) for some positive constants a and b and 
some appropriate notion of e-approximation. Here n = dim (Qi... m ) is the 
dimension of the space in which J (A) lies. 

Evidence pertaining to this conjecture can be found in Refs. |CHTW04l 
IKRT081ILTWD5] . Moreover, the example in Ref. |LTW08j strongly suggests 
that the exponential dependence on 1/e is unavoidable; the pressing open 
question pertains to the dependence upon n. At the moment, no upper bound 
at all is known for this general class of two-party LOSE operations. 
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